API tools faq
paste
Guest User

Untitled

a guest
Sep 1st, 2011
641
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 202.03 KB | None | 0 0
raw download clone embed print report
  1. Shorewall 4.4.22.3 Dump at hector - Thu Sep 1 14:26:29 CEST 2011
  2.  
  3. Counters reset Thu Sep 1 14:26:27 CEST 2011
  4.  
  5. Chain INPUT (policy DROP 0 packets, 0 bytes)
  6. pkts bytes target prot opt in out source destination
  7. 5 882 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW
  8. 114 31423 net2fw all -- eth1 * 0.0.0.0/0 0.0.0.0/0
  9. 20 1891 loc2fw all -- br0 * 0.0.0.0/0 0.0.0.0/0
  10. 0 0 dmz2fw all -- eth3 * 0.0.0.0/0 0.0.0.0/0
  11. 0 0 road2fw all -- tun+ * 0.0.0.0/0 0.0.0.0/0
  12. 0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
  13. 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
  14. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:INPUT:REJECT:'
  15. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
  16.  
  17. Chain FORWARD (policy DROP 0 packets, 0 bytes)
  18. pkts bytes target prot opt in out source destination
  19. 7 388 TCPMSS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU
  20. 31 8923 net_frwd all -- eth1 * 0.0.0.0/0 0.0.0.0/0
  21. 280 52062 loc_frwd all -- br0 * 0.0.0.0/0 0.0.0.0/0
  22. 0 0 dmz_frwd all -- eth3 * 0.0.0.0/0 0.0.0.0/0
  23. 0 0 road_frwd all -- tun+ * 0.0.0.0/0 0.0.0.0/0
  24. 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
  25. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:FORWARD:REJECT:'
  26. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
  27.  
  28. Chain OUTPUT (policy DROP 0 packets, 0 bytes)
  29. pkts bytes target prot opt in out source destination
  30. 127 42547 fw2net all -- * eth1 0.0.0.0/0 0.0.0.0/0
  31. 16 1588 fw2loc all -- * br0 0.0.0.0/0 0.0.0.0/0
  32. 0 0 fw2dmz all -- * eth3 0.0.0.0/0 0.0.0.0/0
  33. 0 0 fw2road all -- * tun+ 0.0.0.0/0 0.0.0.0/0
  34. 0 0 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
  35. 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
  36. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:OUTPUT:REJECT:'
  37. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
  38.  
  39. Chain Broadcast (2 references)
  40. pkts bytes target prot opt in out source destination
  41. 3 741 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST
  42. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type MULTICAST
  43. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type ANYCAST
  44. 0 0 DROP all -- * * 0.0.0.0/0 224.0.0.0/4
  45.  
  46. Chain Drop (5 references)
  47. pkts bytes target prot opt in out source destination
  48. 1 63 all -- * * 0.0.0.0/0 0.0.0.0/0
  49. 0 0 reject tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:113 /* Auth */
  50. 1 63 Broadcast all -- * * 0.0.0.0/0 0.0.0.0/0
  51. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3 code 4 /* Needed ICMP types */
  52. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 11 /* Needed ICMP types */
  53. 1 63 Invalid all -- * * 0.0.0.0/0 0.0.0.0/0
  54. 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,445 /* SMB */
  55. 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:137:139 /* SMB */
  56. 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpts:1024:65535 /* SMB */
  57. 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,139,445 /* SMB */
  58. 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1900 /* UPnP */
  59. 0 0 NotSyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
  60. 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 /* Late DNS Replies */
  61.  
  62. Chain Invalid (2 references)
  63. pkts bytes target prot opt in out source destination
  64. 1 63 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID
  65.  
  66. Chain NotSyn (2 references)
  67. pkts bytes target prot opt in out source destination
  68. 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02
  69.  
  70. Chain Reject (12 references)
  71. pkts bytes target prot opt in out source destination
  72. 3 741 all -- * * 0.0.0.0/0 0.0.0.0/0
  73. 0 0 reject tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:113 /* Auth */
  74. 3 741 Broadcast all -- * * 0.0.0.0/0 0.0.0.0/0
  75. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3 code 4 /* Needed ICMP types */
  76. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 11 /* Needed ICMP types */
  77. 0 0 Invalid all -- * * 0.0.0.0/0 0.0.0.0/0
  78. 0 0 reject udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,445 /* SMB */
  79. 0 0 reject udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:137:139 /* SMB */
  80. 0 0 reject udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpts:1024:65535 /* SMB */
  81. 0 0 reject tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 135,139,445 /* SMB */
  82. 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1900 /* UPnP */
  83. 0 0 NotSyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
  84. 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:53 /* Late DNS Replies */
  85.  
  86. Chain blacklog (53 references)
  87. pkts bytes target prot opt in out source destination
  88. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:blacklst:DROP:'
  89. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  90.  
  91. Chain blacklst (2 references)
  92. pkts bytes target prot opt in out source destination
  93. 0 0 blacklog all -- * * 141.76.46.91 0.0.0.0/0
  94. 0 0 blacklog all -- * * 160.116.16.83 0.0.0.0/0
  95. 0 0 blacklog all -- * * 220.160.215.17 0.0.0.0/0
  96. 0 0 blacklog all -- * * 61.155.0.0/16 0.0.0.0/0
  97. 0 0 blacklog all -- * * 61.54.0.0/16 0.0.0.0/0
  98. 0 0 blacklog all -- * * 80.48.0.0/13 0.0.0.0/0
  99. 0 0 blacklog all -- * * 24.30.128.0/17 0.0.0.0/0
  100. 0 0 blacklog all -- * * 4.35.216.0/21 0.0.0.0/0
  101. 0 0 blacklog all -- * * 66.35.229.0/24 0.0.0.0/0
  102. 0 0 blacklog all -- * * 66.35.247.0/24 0.0.0.0/0
  103. 0 0 blacklog all -- * * 64.94.89.0/24 0.0.0.0/0
  104. 0 0 blacklog all -- * * 64.152.73.0/24 0.0.0.0/0
  105. 0 0 blacklog all -- * * 63.68.54.0/23 0.0.0.0/0
  106. 0 0 blacklog all -- * * 205.180.0.0/14 0.0.0.0/0
  107. 0 0 blacklog all -- * * 200.59.91.10 0.0.0.0/0
  108. 0 0 blacklog all -- * * 200.163.190.151 0.0.0.0/0
  109. 0 0 blacklog all -- * * 216.194.70.14 0.0.0.0/0
  110. 0 0 blacklog all -- * * 69.51.8.0/24 0.0.0.0/0
  111. 0 0 blacklog all -- * * 213.132.198.26 0.0.0.0/0
  112. 0 0 blacklog all -- * * 213.132.198.31 0.0.0.0/0
  113. 0 0 blacklog all -- * * 64.225.232.112 0.0.0.0/0
  114. 0 0 blacklog all -- * * 213.132.198.34 0.0.0.0/0
  115. 0 0 blacklog all -- * * 64.70.54.0/24 0.0.0.0/0
  116. 0 0 blacklog all -- * * 218.22.0.0/15 0.0.0.0/0
  117. 0 0 blacklog all -- * * 65.18.159.245 0.0.0.0/0
  118. 0 0 blacklog all -- * * 202.99.128.0/18 0.0.0.0/0
  119. 0 0 blacklog all -- * * 202.101.64.0/19 0.0.0.0/0
  120. 0 0 blacklog all -- * * 218.36.173.0/24 0.0.0.0/0
  121. 0 0 blacklog all -- * * 83.103.128.0/17 0.0.0.0/0
  122. 0 0 blacklog all -- * * 213.160.144.0/20 0.0.0.0/0
  123. 0 0 blacklog all -- * * 216.19.0.0/18 0.0.0.0/0
  124. 0 0 blacklog all -- * * 61.139.76.0/24 0.0.0.0/0
  125. 0 0 blacklog all -- * * 210.13.32.0/19 0.0.0.0/0
  126. 0 0 blacklog all -- * * 204.16.208.0/22 0.0.0.0/0
  127. 0 0 blacklog all -- * * 218.75.24.224/29 0.0.0.0/0
  128. 0 0 blacklog all -- * * 218.13.0.0/16 0.0.0.0/0
  129. 0 0 blacklog all -- * * 218.14.0.0/15 0.0.0.0/0
  130. 0 0 blacklog all -- * * 218.16.0.0/15 0.0.0.0/0
  131. 0 0 blacklog all -- * * 218.18.0.0/16 0.0.0.0/0
  132. 0 0 blacklog all -- * * 202.134.188.0/25 0.0.0.0/0
  133. 0 0 blacklog all -- * * 85.100.152.0/21 0.0.0.0/0
  134. 0 0 blacklog all -- * * 84.220.0.0/15 0.0.0.0/0
  135. 0 0 blacklog all -- * * 211.152.32.0/19 0.0.0.0/0
  136. 0 0 blacklog all -- * * 200.223.0.0/16 0.0.0.0/0
  137. 0 0 blacklog all -- * * 200.59.192.0/20 0.0.0.0/0
  138. 0 0 blacklog all -- * * 64.38.33.13 0.0.0.0/0
  139. 0 0 blacklog all -- * * 82.98.86.177 0.0.0.0/0
  140. 0 0 blacklog all -- * * 118.112.108.194 0.0.0.0/0
  141. 0 0 blacklog all -- * * 58.208.0.0/12 0.0.0.0/0
  142. 0 0 blacklog all -- * * 218.6.0.0/17 0.0.0.0/0
  143. 0 0 blacklog all -- * * 219.128.0.0/13 0.0.0.0/0
  144. 0 0 blacklog all -- * * 219.128.0.0/15 0.0.0.0/0
  145. 0 0 blacklog all -- * * 77.10.80.135 0.0.0.0/0
  146.  
  147. Chain br0_mac (2 references)
  148. pkts bytes target prot opt in out source destination
  149. 0 0 RETURN all -- * * 172.16.128.8 0.0.0.0/0 MAC 00:1D:09:3C:02:1F
  150. 0 0 RETURN all -- * * 172.16.40.20 0.0.0.0/0 MAC 00:E0:98:78:CE:34
  151. 0 0 RETURN all -- * * 172.16.99.105 0.0.0.0/0 MAC 00:0C:29:70:6D:72
  152. 0 0 RETURN all -- * * 172.16.0.13 0.0.0.0/0 MAC 00:0C:29:F7:DE:87
  153. 0 0 RETURN all -- * * 172.16.99.39 0.0.0.0/0 MAC 00:13:72:17:C4:67
  154. 0 0 RETURN all -- * * 172.16.99.20 0.0.0.0/0 MAC 00:13:72:17:C4:51
  155. 0 0 RETURN all -- * * 172.16.99.18 0.0.0.0/0 MAC 00:E0:29:97:F4:A1
  156. 0 0 RETURN all -- * * 172.16.99.28 0.0.0.0/0 MAC 00:06:5B:BD:8F:08
  157. 0 0 RETURN all -- * * 172.16.99.16 0.0.0.0/0 MAC 00:B0:D0:B9:7D:6B
  158. 0 0 RETURN all -- * * 172.16.99.11 0.0.0.0/0 MAC 00:22:19:30:00:C9
  159. 0 0 RETURN all -- * * 172.16.66.14 0.0.0.0/0 MAC 00:30:65:A1:95:16
  160. 0 0 RETURN all -- * * 172.16.66.15 0.0.0.0/0 MAC 00:1D:4F:4A:43:91
  161. 0 0 RETURN all -- * * 172.16.99.13 0.0.0.0/0 MAC 00:10:4B:70:89:76
  162. 0 0 RETURN all -- * * 172.16.99.14 0.0.0.0/0 MAC 00:10:A4:09:D6:3E
  163. 0 0 RETURN all -- * * 172.16.66.12 0.0.0.0/0 MAC 00:30:65:C4:96:24
  164. 0 0 RETURN all -- * * 172.16.0.7 0.0.0.0/0 MAC 00:1D:09:0D:0B:80
  165. 0 0 RETURN all -- * * 172.16.66.16 0.0.0.0/0 MAC 00:30:65:E6:D1:2A
  166. 0 0 RETURN all -- * * 172.16.66.10 0.0.0.0/0 MAC 00:0A:27:E3:93:60
  167. 0 0 RETURN all -- * * 172.16.66.11 0.0.0.0/0 MAC 00:23:5A:DE:01:6B
  168. 1 59 RETURN all -- * * 172.16.0.5 0.0.0.0/0 MAC 00:1E:C9:D7:DC:D7
  169. 0 0 RETURN all -- * * 172.16.0.50 0.0.0.0/0 MAC 00:50:8B:B8:66:27
  170. 0 0 RETURN all -- * * 172.16.99.15 0.0.0.0/0 MAC 00:19:D1:6D:B1:DE
  171. 0 0 RETURN all -- * * 172.16.99.26 0.0.0.0/0 MAC 00:06:5B:84:2D:02
  172. 0 0 RETURN all -- * * 172.16.44.14 0.0.0.0/0 MAC 00:1D:09:3C:02:1F
  173. 0 0 RETURN all -- * * 172.16.99.24 0.0.0.0/0 MAC 00:06:5B:87:06:7A
  174. 0 0 RETURN all -- * * 172.16.40.13 0.0.0.0/0 MAC 00:E0:98:92:02:01
  175. 0 0 RETURN all -- * * 172.16.40.14 0.0.0.0/0 MAC 00:0F:1F:0F:7F:F3
  176. 0 0 RETURN all -- * * 172.16.99.10 0.0.0.0/0 MAC 00:B0:D0:D5:32:4F
  177. 0 0 RETURN all -- * * 172.16.99.102 0.0.0.0/0 MAC 00:11:43:66:1B:D1
  178. 0 0 RETURN all -- * * 172.16.40.20 0.0.0.0/0 MAC 00:E0:98:78:CE:34
  179. 0 0 RETURN all -- * * 172.16.99.26 0.0.0.0/0 MAC 00:B0:D0:D5:32:4F
  180. 0 0 RETURN all -- * * 172.16.99.17 0.0.0.0/0 MAC 00:B0:D0:D5:32:59
  181. 0 0 RETURN all -- * * 172.16.66.20 0.0.0.0/0 MAC 00:1E:C2:01:22:5D
  182. 0 0 RETURN all -- * * 172.16.66.21 0.0.0.0/0 MAC D8:30:62:A6:39:33
  183. 0 0 RETURN all -- * * 172.16.99.26 0.0.0.0/0 MAC 00:E0:98:05:35:AD
  184. 0 0 RETURN all -- * * 172.16.42.15 0.0.0.0/0 MAC 08:00:20:AC:15:B3
  185. 0 0 RETURN all -- * * 172.16.42.254 0.0.0.0/0 MAC 00:50:56:98:3C:01
  186. 0 0 RETURN all -- * * 172.16.99.21 0.0.0.0/0 MAC 00:06:5B:31:26:D5
  187. 0 0 RETURN all -- * * 172.16.0.10 0.0.0.0/0 MAC 00:03:BA:0A:0E:B4
  188. 0 0 RETURN all -- * * 172.16.0.12 0.0.0.0/0 MAC 00:03:BA:0A:11:B2
  189. 0 0 RETURN all -- * * 172.16.66.18 0.0.0.0/0 MAC 00:03:93:4C:68:1A
  190. 0 0 RETURN all -- * * 172.16.99.23 0.0.0.0/0 MAC 00:06:5B:19:3D:E0
  191. 0 0 RETURN all -- * * 172.16.99.25 0.0.0.0/0 MAC 00:24:E8:40:38:3E
  192. 0 0 RETURN all -- * * 172.16.42.14 0.0.0.0/0 MAC 00:05:02:0C:0F:37
  193. 0 0 RETURN all -- * * 172.16.99.29 0.0.0.0/0 MAC 00:E0:7D:8C:89:78
  194. 0 0 RETURN all -- * * 172.16.0.20 0.0.0.0/0 MAC 00:03:BA:18:01:2D
  195. 0 0 RETURN all -- * * 172.16.99.31 0.0.0.0/0 MAC 00:08:74:38:EF:BB
  196. 0 0 RETURN all -- * * 172.16.0.4 0.0.0.0/0 MAC 00:C0:B7:CA:22:F8
  197. 0 0 RETURN all -- * * 172.16.0.6 0.0.0.0/0 MAC 00:50:8B:DC:FD:D6
  198. 0 0 RETURN all -- * * 172.16.99.27 0.0.0.0/0 MAC 00:07:E9:E2:18:97
  199. 0 0 RETURN all -- * * 172.16.66.11 0.0.0.0/0 MAC 00:05:02:B5:CC:23
  200. 0 0 RETURN all -- * * 172.16.99.35 0.0.0.0/0 MAC 78:2B:CB:97:C8:59
  201. 0 0 RETURN all -- * * 172.16.99.36 0.0.0.0/0 MAC 00:06:5B:31:26:D5
  202. 0 0 RETURN all -- * * 172.16.66.13 0.0.0.0/0 MAC 00:05:02:AE:CA:72
  203. 0 0 RETURN all -- * * 172.16.40.1 0.0.0.0/0 MAC 00:10:A4:98:6D:F1
  204. 0 0 RETURN all -- * * 172.16.99.25 0.0.0.0/0 MAC 00:0C:F1:C8:CF:6A
  205. 0 0 RETURN all -- * * 172.16.99.30 0.0.0.0/0 MAC 00:0C:F1:CB:49:BD
  206. 0 0 RETURN all -- * * 172.16.99.37 0.0.0.0/0 MAC 00:11:11:44:8B:38
  207. 0 0 RETURN all -- * * 172.16.99.32 0.0.0.0/0 MAC 00:11:11:36:6C:2E
  208. 0 0 RETURN all -- * * 172.16.0.9 0.0.0.0/0 MAC 00:11:43:37:BB:DE
  209. 0 0 RETURN all -- * * 172.16.0.8 0.0.0.0/0 MAC 00:11:43:D1:EA:B5
  210. 0 0 RETURN all -- * * 172.16.0.1 0.0.0.0/0 MAC 00:19:B9:F8:A3:12
  211. 0 0 RETURN all -- * * 172.16.99.33 0.0.0.0/0 MAC 00:12:3F:71:DD:15
  212. 0 0 RETURN all -- * * 172.16.99.12 0.0.0.0/0 MAC 00:12:3F:71:DC:85
  213. 0 0 RETURN all -- * * 172.16.99.34 0.0.0.0/0 MAC 00:13:72:AF:1C:CD
  214. 0 0 RETURN all -- * * 172.16.99.40 0.0.0.0/0 MAC 00:19:D1:94:2B:8C
  215. 0 0 RETURN all -- * * 172.16.99.41 0.0.0.0/0 MAC 00:19:D1:94:2B:84
  216. 0 0 RETURN all -- * * 172.16.99.42 0.0.0.0/0 MAC 00:19:D1:94:2B:E9
  217. 0 0 RETURN all -- * * 172.16.99.43 0.0.0.0/0 MAC 00:19:D1:94:2B:F3
  218. 0 0 RETURN all -- * * 172.16.119.23 0.0.0.0/0 MAC 00:0C:29:E7:7D:60
  219. 0 0 RETURN all -- * * 172.16.130.30 0.0.0.0/0 MAC 00:0C:29:9E:91:89
  220. 0 0 RETURN all -- * * 172.16.33.5 0.0.0.0/0 MAC 00:15:C5:80:BB:C1
  221. 0 0 RETURN all -- * * 172.16.99.99 0.0.0.0/0 MAC 00:0C:29:56:9F:F0
  222. 0 0 RETURN all -- * * 172.16.99.98 0.0.0.0/0 MAC 00:0C:29:08:75:FF
  223. 0 0 RETURN all -- * * 172.16.99.110 0.0.0.0/0 MAC 00:0C:29:8E:29:39
  224. 0 0 RETURN all -- * * 172.16.99.39 0.0.0.0/0 MAC 00:15:C5:AF:DF:93
  225. 0 0 RETURN all -- * * 172.16.99.97 0.0.0.0/0 MAC 00:50:04:61:8E:BC
  226. 0 0 RETURN all -- * * 172.16.44.14 0.0.0.0/0 MAC 00:11:43:3F:56:83
  227. 0 0 RETURN all -- * * 172.16.44.11 0.0.0.0/0 MAC 00:0D:56:DD:EE:1D
  228. 0 0 RETURN all -- * * 172.16.44.15 0.0.0.0/0 MAC 00:0B:DB:9E:CF:D3
  229. 0 0 RETURN all -- * * 172.16.44.16 0.0.0.0/0 MAC 00:0F:1F:AA:AE:31
  230. 0 0 RETURN all -- * * 172.16.44.17 0.0.0.0/0 MAC 00:12:3F:12:9F:E3
  231. 0 0 RETURN all -- * * 172.16.44.18 0.0.0.0/0 MAC 00:14:22:CF:4B:5A
  232. 0 0 RETURN all -- * * 172.16.44.19 0.0.0.0/0 MAC 00:14:22:F8:D2:96
  233. 0 0 RETURN all -- * * 172.16.44.20 0.0.0.0/0 MAC 00:16:6F:00:A2:DE
  234. 0 0 RETURN all -- * * 172.16.44.21 0.0.0.0/0 MAC 00:17:F2:D6:24:BF
  235. 0 0 RETURN all -- * * 172.16.66.17 0.0.0.0/0 MAC 00:0D:93:79:6C:DC
  236. 0 0 RETURN all -- * * 172.16.13.133 0.0.0.0/0 MAC 00:0C:29:15:25:06
  237. 0 0 RETURN all -- * * 172.16.13.134 0.0.0.0/0 MAC 00:0C:29:00:DF:F6
  238. 0 0 RETURN all -- * * 172.16.0.14 0.0.0.0/0 MAC 00:0C:29:41:49:1E
  239. 0 0 RETURN all -- * * 172.16.10.10 0.0.0.0/0 MAC 00:0C:29:BE:F3:46
  240. 0 0 RETURN all -- * * 172.16.10.11 0.0.0.0/0 MAC 00:0C:29:54:F4:1D
  241. 0 0 RETURN all -- * * 172.16.10.12 0.0.0.0/0 MAC 00:0C:29:48:69:42
  242. 0 0 RETURN all -- * * 172.16.0.15 0.0.0.0/0 MAC 00:0C:29:47:2B:BE
  243. 0 0 RETURN all -- * * 172.16.10.15 0.0.0.0/0 MAC 00:0C:29:76:0B:B9
  244. 0 0 RETURN all -- * * 172.16.0.16 0.0.0.0/0 MAC 00:0C:29:14:A0:22
  245. 0 0 RETURN all -- * * 172.16.13.134 0.0.0.0/0 MAC 00:0C:29:AF:86:65
  246. 0 0 RETURN all -- * * 172.16.13.133 0.0.0.0/0 MAC 00:0C:29:D0:5F:C4
  247. 0 0 RETURN all -- * * 172.16.99.111 0.0.0.0/0 MAC 00:0C:29:B5:6F:2B
  248. 0 0 RETURN all -- * * 172.16.99.19 0.0.0.0/0 MAC 00:11:43:66:1B:D1
  249. 0 0 RETURN all -- * * 172.16.99.99 0.0.0.0/0 MAC 00:0F:1F:24:34:9A
  250. 0 0 RETURN all -- * * 172.16.0.22 0.0.0.0/0 MAC 00:0C:29:20:6B:E9
  251. 1 107 RETURN all -- * * 172.16.0.33 0.0.0.0/0 MAC 00:0C:29:DB:AF:4F
  252. 0 0 RETURN all -- * * 172.16.0.41 0.0.0.0/0 MAC 00:0C:29:10:CE:82
  253. 0 0 RETURN all -- * * 172.16.0.18 0.0.0.0/0 MAC 00:0C:29:C4:FC:56
  254. 0 0 RETURN all -- * * 172.16.0.25 0.0.0.0/0 MAC 00:0C:29:C4:57:27
  255. 0 0 RETURN all -- * * 172.16.100.10 0.0.0.0/0 MAC 00:0C:29:D8:FD:B0
  256. 0 0 RETURN all -- * * 172.16.88.222 0.0.0.0/0 MAC 00:0C:29:C8:EF:40
  257. 0 0 RETURN all -- * * 172.16.99.167 0.0.0.0/0 MAC 00:0C:29:C5:9A:83
  258. 0 0 RETURN all -- * * 172.16.99.22 0.0.0.0/0 MAC B8:AC:6F:8A:1A:05
  259. 0 0 RETURN all -- * * 172.16.0.18 0.0.0.0/0 MAC 00:0C:29:E2:FD:CD
  260. 0 0 RETURN all -- * * 172.16.12.11 0.0.0.0/0 MAC 00:0C:29:E8:55:6E
  261. 0 0 RETURN all -- * * 172.16.0.17 0.0.0.0/0 MAC 00:0C:29:C5:0C:85
  262. 0 0 RETURN all -- * * 172.16.0.14 0.0.0.0/0 MAC 00:0C:29:D0:D1:D8
  263. 0 0 RETURN all -- * * 172.16.99.48 0.0.0.0/0 MAC 00:14:22:EC:C1:B8
  264. 0 0 RETURN all -- * * 172.16.99.50 0.0.0.0/0 MAC 00:15:C5:80:BB:C1
  265. 0 0 RETURN all -- * * 172.16.99.45 0.0.0.0/0 MAC 00:0C:29:65:92:7E
  266. 0 0 RETURN all -- * * 172.16.99.38 0.0.0.0/0 MAC 00:0C:29:EC:DA:34
  267. 0 0 RETURN all -- * * 172.16.33.1 0.0.0.0/0 MAC 00:21:70:B5:21:4F
  268. 0 0 RETURN all -- * * 172.16.14.14 0.0.0.0/0 MAC 00:0C:29:C4:57:27
  269. 0 0 RETURN all -- * * 172.16.111.20 0.0.0.0/0 MAC 00:0C:29:FD:A4:70
  270. 0 0 RETURN all -- * * 172.16.100.100 0.0.0.0/0 MAC 00:0C:29:BB:76:82
  271. 0 0 RETURN all -- * * 172.16.0.111 0.0.0.0/0 MAC 00:0C:29:A0:0E:4E
  272. 0 0 RETURN all -- * * 172.16.253.130 0.0.0.0/0 MAC 00:0C:29:49:38:44
  273. 0 0 RETURN all -- * * 172.16.253.131 0.0.0.0/0 MAC 00:0C:29:FE:50:DB
  274. 0 0 RETURN all -- * * 172.16.253.132 0.0.0.0/0 MAC 00:0C:29:DD:85:53
  275. 0 0 RETURN all -- * * 172.16.10.16 0.0.0.0/0 MAC 00:0C:29:44:84:2F
  276. 0 0 RETURN all -- * * 172.16.10.17 0.0.0.0/0 MAC 00:0C:29:3C:61:8D
  277. 0 0 RETURN all -- * * 172.16.253.138 0.0.0.0/0 MAC 00:0C:29:75:68:7B
  278. 0 0 RETURN all -- * * 172.16.253.134 0.0.0.0/0 MAC 00:0C:29:9C:A6:4D
  279. 0 0 RETURN all -- * * 172.16.253.135 0.0.0.0/0 MAC 00:0C:29:6D:04:96
  280. 0 0 RETURN all -- * * 172.16.253.137 0.0.0.0/0 MAC 00:0C:29:9C:A6:4D
  281. 0 0 RETURN all -- * * 172.16.253.136 0.0.0.0/0 MAC 00:0C:29:9C:A6:4D
  282. 0 0 RETURN all -- * * 172.16.0.23 0.0.0.0/0 MAC 00:0C:29:B1:EA:B0
  283. 0 0 RETURN all -- * * 172.16.254.21 0.0.0.0/0 MAC 00:11:25:D4:BD:75
  284. 0 0 RETURN all -- * * 172.16.254.22 0.0.0.0/0 MAC 00:22:68:15:6C:6F
  285. 0 0 RETURN all -- * * 172.16.254.18 0.0.0.0/0 MAC 00:0C:29:8E:29:39
  286. 0 0 RETURN all -- * * 172.16.99.89 0.0.0.0/0 MAC 00:22:68:15:6E:59
  287. 0 0 RETURN all -- * * 172.16.254.5 0.0.0.0/0 MAC 00:0C:29:63:26:3B
  288. 0 0 RETURN all -- * * 172.16.254.1 0.0.0.0/0 MAC 00:19:B9:F8:A3:12
  289. 0 0 RETURN all -- * * 172.16.254.8 0.0.0.0/0 MAC 00:B0:D0:B9:7D:6B
  290. 0 0 RETURN all -- * * 172.16.126.1 0.0.0.0/0 MAC 00:0C:29:D1:17:53
  291. 0 0 RETURN all -- * * 172.16.125.22 0.0.0.0/0 MAC 00:0C:29:1C:30:5D
  292. 0 0 RETURN all -- * * 172.16.99.165 0.0.0.0/0 MAC 00:0C:29:9C:A6:4D
  293. 0 0 RETURN all -- * * 172.16.121.1 0.0.0.0/0 MAC 00:0C:29:C8:05:89
  294. 0 0 RETURN all -- * * 172.16.99.44 0.0.0.0/0 MAC 00:15:C5:5A:EB:AA
  295. 0 0 RETURN all -- * * 172.16.99.109 0.0.0.0/0 MAC 00:0C:29:C3:C3:BD
  296. 0 0 RETURN all -- * * 172.16.88.1 0.0.0.0/0 MAC 00:0D:60:F9:97:86
  297. 0 0 RETURN all -- * * 172.16.123.2 0.0.0.0/0 MAC 00:0C:29:17:9F:41
  298. 0 0 RETURN all -- * * 172.16.0.27 0.0.0.0/0 MAC 00:0C:29:A7:76:46
  299. 0 0 RETURN all -- * * 172.16.0.29 0.0.0.0/0 MAC 00:0C:29:FF:94:5B
  300. 0 0 RETURN all -- * * 172.16.0.28 0.0.0.0/0 MAC 00:0C:29:FB:9B:4D
  301. 0 0 RETURN all -- * * 172.16.66.17 0.0.0.0/0 MAC 00:23:32:CB:90:1A
  302. 0 0 RETURN all -- * * 172.16.99.51 0.0.0.0/0 MAC 00:22:19:19:54:DD
  303. 0 0 RETURN all -- * * 172.16.15.10 0.0.0.0/0 MAC 00:0C:29:47:80:81
  304. 0 0 RETURN all -- * * 172.16.15.12 0.0.0.0/0 MAC 00:50:56:99:53:66
  305. 0 0 RETURN all -- * * 172.16.254.16 0.0.0.0/0 MAC 00:0C:29:D7:E3:F1
  306. 0 0 RETURN all -- * * 172.16.88.2 0.0.0.0/0 MAC 00:0C:29:04:72:31
  307. 1 153 RETURN all -- * * 172.16.99.4 0.0.0.0/0 MAC 00:22:19:30:09:13
  308. 0 0 RETURN all -- * * 172.16.33.2 0.0.0.0/0 MAC 00:21:70:D0:B0:31
  309. 0 0 RETURN all -- * * 172.16.33.4 0.0.0.0/0 MAC 00:24:E8:C3:2F:44
  310. 0 0 RETURN all -- * * 172.16.215.11 0.0.0.0/0 MAC 00:0C:29:CC:C8:11
  311. 0 0 RETURN all -- * * 172.16.33.3 0.0.0.0/0 MAC 00:21:70:C3:BD:A6
  312. 0 0 RETURN all -- * * 172.16.200.32 0.0.0.0/0 MAC 00:0C:29:B0:DE:D0
  313. 0 0 RETURN all -- * * 172.16.200.31 0.0.0.0/0 MAC 00:0C:29:A6:92:70
  314. 0 0 RETURN all -- * * 172.16.200.40 0.0.0.0/0 MAC 00:0C:29:16:D5:09
  315. 0 0 RETURN all -- * * 172.16.199.52 0.0.0.0/0 MAC 00:0C:29:A3:74:09
  316. 0 0 RETURN all -- * * 172.16.200.43 0.0.0.0/0 MAC 00:0C:29:21:E0:1E
  317. 0 0 RETURN all -- * * 172.16.99.123 0.0.0.0/0 MAC 00:0C:29:D7:E3:F1
  318. 0 0 RETURN all -- * * 172.16.199.25 0.0.0.0/0 MAC 00:14:85:09:4B:FE
  319. 0 0 RETURN all -- * * 172.16.199.31 0.0.0.0/0 MAC 00:0C:29:EE:9E:DE
  320. 0 0 RETURN all -- * * 172.16.199.32 0.0.0.0/0 MAC 00:0C:29:9D:6B:01
  321. 0 0 RETURN all -- * * 172.16.199.4 0.0.0.0/0 MAC 00:0C:29:5C:10:6D
  322. 0 0 RETURN all -- * * 172.16.15.16 0.0.0.0/0 MAC 00:0C:29:DE:55:20
  323. 0 0 RETURN all -- * * 172.16.10.88 0.0.0.0/0 MAC 00:0C:29:19:45:5A
  324. 0 0 RETURN all -- * * 172.16.232.6 0.0.0.0/0 MAC 00:0C:29:47:A2:2B
  325. 0 0 RETURN all -- * * 172.16.232.7 0.0.0.0/0 MAC 00:0C:29:03:F0:32
  326. 0 0 RETURN all -- * * 172.16.232.8 0.0.0.0/0 MAC 00:0C:29:99:EC:26
  327. 0 0 RETURN all -- * * 172.16.254.7 0.0.0.0/0 MAC 00:12:79:57:E5:91
  328. 0 0 RETURN all -- * * 172.16.99.2 0.0.0.0/0 MAC 00:24:E8:40:4A:35
  329. 0 0 RETURN all -- * * 172.16.99.88 0.0.0.0/0 MAC 00:0D:60:F9:97:86
  330. 0 0 RETURN all -- * * 172.16.11.1 0.0.0.0/0 MAC 00:0C:29:FA:52:F6
  331. 0 0 RETURN all -- * * 172.16.254.11 0.0.0.0/0 MAC 00:0C:29:C2:A8:B8
  332. 0 0 RETURN all -- * * 172.16.99.92 0.0.0.0/0 MAC 00:0C:29:86:76:33
  333. 0 0 RETURN all -- * * 172.16.99.95 0.0.0.0/0 MAC 00:0C:29:95:52:C8
  334. 0 0 RETURN all -- * * 172.16.11.5 0.0.0.0/0 MAC 00:0C:29:08:6C:5C
  335. 0 0 RETURN all -- * * 172.16.99.3 0.0.0.0/0 MAC A4:BA:DB:02:52:01
  336. 0 0 RETURN all -- * * 172.16.125.111 0.0.0.0/0 MAC 00:1B:21:49:08:B0
  337. 0 0 RETURN all -- * * 172.16.0.11 0.0.0.0/0 MAC 00:26:B9:43:61:9E
  338. 0 0 RETURN all -- * * 172.16.222.10 0.0.0.0/0 MAC 00:0C:29:AF:B8:79
  339. 0 0 RETURN all -- * * 172.16.0.200 0.0.0.0/0 MAC 00:0C:29:48:D9:33
  340. 0 0 RETURN all -- * * 172.16.150.2 0.0.0.0/0 MAC 00:15:5D:63:22:00
  341. 0 0 RETURN all -- * * 172.16.150.1 0.0.0.0/0 MAC 00:0C:29:E5:52:C0
  342. 0 0 RETURN all -- * * 172.16.99.96 0.0.0.0/0 MAC 00:0C:29:E7:8F:DC
  343. 7 1528 RETURN all -- * * 172.16.99.24 0.0.0.0/0 MAC B8:AC:6F:7E:4C:53
  344. 2 158 RETURN all -- * * 172.16.99.9 0.0.0.0/0 MAC B8:AC:6F:7E:4C:5C
  345. 0 0 RETURN all -- * * 172.16.33.6 0.0.0.0/0 MAC 00:26:B9:D1:B3:E6
  346. 0 0 RETURN all -- * * 172.16.128.2 0.0.0.0/0 MAC 00:0C:29:83:22:0B
  347. 0 0 RETURN all -- * * 172.16.0.60 0.0.0.0/0 MAC 00:15:5D:00:28:06
  348. 0 0 RETURN all -- * * 172.16.0.61 0.0.0.0/0 MAC 00:15:5D:00:28:08
  349. 0 0 RETURN all -- * * 172.16.0.62 0.0.0.0/0 MAC 00:15:5D:FE:04:03
  350. 0 0 RETURN all -- * * 172.16.99.8 0.0.0.0/0 MAC 00:0C:29:84:F5:6E
  351. 0 0 RETURN all -- * * 172.16.120.31 0.0.0.0/0 MAC 00:0C:29:9C:A6:4D
  352. 0 0 RETURN all -- * * 172.16.66.10 0.0.0.0/0 MAC E8:06:88:CC:99:58
  353. 0 0 RETURN all -- * * 172.16.0.21 0.0.0.0/0 MAC 00:0C:29:7E:38:1A
  354. 0 0 RETURN all -- * * 172.16.0.71 0.0.0.0/0 MAC 00:0C:29:F8:70:16
  355. 0 0 RETURN all -- * * 172.16.0.40 0.0.0.0/0 MAC 00:05:98:11:51:10
  356. 0 0 RETURN all -- * * 172.16.22.75 0.0.0.0/0 MAC 00:04:F2:E6:C5:F0
  357. 0 0 RETURN all -- * * 172.16.22.71 0.0.0.0/0 MAC 00:1A:E8:31:C8:35
  358. 0 0 RETURN all -- * * 172.16.22.76 0.0.0.0/0 MAC 00:1A:E8:32:37:89
  359. 0 0 RETURN all -- * * 172.16.22.73 0.0.0.0/0 MAC 00:1A:E8:31:C8:45
  360. 0 0 RETURN all -- * * 172.16.22.72 0.0.0.0/0 MAC 00:1A:E8:32:37:78
  361. 0 0 RETURN all -- * * 172.16.22.15 0.0.0.0/0 MAC 00:04:F2:E6:C5:02
  362. 0 0 RETURN all -- * * 172.16.22.53 0.0.0.0/0 MAC 00:1A:E8:31:C7:D8
  363. 0 0 RETURN all -- * * 172.16.98.10 0.0.0.0/0 MAC 00:22:19:2F:FF:07
  364. 0 0 RETURN all -- * * 172.16.98.11 0.0.0.0/0 MAC 00:11:11:36:6C:2E
  365. 0 0 RETURN all -- * * 172.16.98.12 0.0.0.0/0 MAC 00:19:D1:94:2B:E9
  366. 0 0 RETURN all -- * * 172.16.66.38 0.0.0.0/0 MAC 00:22:68:15:6C:6F
  367. 0 0 RETURN all -- * * 172.16.98.13 0.0.0.0/0 MAC 00:22:19:19:87:58
  368. 0 0 RETURN all -- * * 172.16.98.15 0.0.0.0/0 MAC B8:AC:6F:8A:1A:68
  369. 0 0 RETURN all -- * * 172.16.30.15 0.0.0.0/0 MAC 00:15:99:2C:C4:DA
  370. 0 0 RETURN all -- * * 172.16.119.2 0.0.0.0/0 MAC 00:0C:29:7B:32:84
  371. 0 0 RETURN all -- * * 172.16.119.21 0.0.0.0/0 MAC 00:0C:29:FE:09:DF
  372. 0 0 RETURN all -- * * 172.16.119.24 0.0.0.0/0 MAC 00:0C:29:09:D7:F2
  373. 0 0 RETURN all -- * * 172.16.22.247 0.0.0.0/0 MAC 00:1A:E8:38:12:3E
  374. 0 0 RETURN all -- * * 172.16.0.67 0.0.0.0/0 MAC 00:15:5D:00:28:15
  375. 0 0 RETURN all -- * * 172.16.0.60 0.0.0.0/0 MAC 00:0C:29:7A:34:71
  376. 3 164 RETURN all -- * * 172.16.99.5 0.0.0.0/0 MAC BC:30:5B:D1:C7:92
  377. 0 0 RETURN all -- * * 172.16.129.5 0.0.0.0/0 MAC 00:0C:29:D4:DA:7D
  378. 0 0 RETURN all -- * * 172.16.129.6 0.0.0.0/0 MAC F0:DE:F1:3B:BA:F4
  379. 0 0 RETURN all -- * * 172.16.129.3 0.0.0.0/0 MAC 00:0C:29:12:9B:7E
  380. 0 0 RETURN all -- * * 172.16.129.1 0.0.0.0/0 MAC 00:0C:29:C9:76:E2
  381. 0 0 RETURN all -- * * 172.16.0.75 0.0.0.0/0 MAC 78:2B:CB:0A:51:1B
  382. 0 0 RETURN all -- * * 172.16.0.70 0.0.0.0/0 MAC 78:2B:CB:0A:51:58
  383. 0 0 RETURN all -- * * 172.16.0.70 0.0.0.0/0 MAC 78:2B:CB:0A:51:57
  384. 0 0 RETURN all -- * * 172.16.66.44 0.0.0.0/0 MAC F0:DE:F1:49:74:E1
  385. 0 0 RETURN all -- * * 172.16.124.10 0.0.0.0/0 MAC 00:0C:29:8D:B7:13
  386. 0 0 RETURN all -- * * 172.16.124.11 0.0.0.0/0 MAC 00:0C:29:69:BE:65
  387. 0 0 RETURN all -- * * 172.16.0.162 0.0.0.0/0 MAC 00:30:48:99:F9:C6
  388. 0 0 RETURN all -- * * 172.16.128.21 0.0.0.0/0 MAC 00:0C:29:22:DF:5B
  389. 0 0 RETURN all -- * * 172.16.128.1 0.0.0.0/0 MAC 00:15:5D:FE:04:13
  390. 0 0 LOG all -- * * 172.16.130.20 0.0.0.0/0 MAC 00:0C:29:E5:9D:7B LOG flags 0 level 6 prefix `Shorewall:br0_mac:ACCEPT:'
  391. 0 0 RETURN all -- * * 172.16.130.20 0.0.0.0/0 MAC 00:0C:29:E5:9D:7B
  392. 0 0 RETURN all -- * * 172.16.0.2 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST
  393. 0 0 RETURN all -- * * 172.16.0.2 224.0.0.0/4
  394. 9 908 reject all -- * * 0.0.0.0/0 0.0.0.0/0
  395.  
  396. Chain dmz2fw (1 references)
  397. pkts bytes target prot opt in out source destination
  398. 0 0 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW
  399. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  400. 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
  401. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
  402.  
  403. Chain dmz2loc (1 references)
  404. pkts bytes target prot opt in out source destination
  405. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  406. 0 0 ~log4 tcp -- * * 0.0.0.0/0 172.16.0.9 [goto] multiport dports 143,25
  407. 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
  408. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
  409.  
  410. Chain dmz2net (1 references)
  411. pkts bytes target prot opt in out source destination
  412. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  413. 0 0 ~log3 tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] multiport dports 25,80,21
  414. 0 0 ~log3 tcp -- * * 0.0.0.0/0 141.30.13.10 [goto] tcp dpt:80
  415. 0 0 ~log3 udp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] multiport dports 53,123
  416. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  417.  
  418. Chain dmz2road (1 references)
  419. pkts bytes target prot opt in out source destination
  420. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  421. 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
  422. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
  423.  
  424. Chain dmz_frwd (1 references)
  425. pkts bytes target prot opt in out source destination
  426. 0 0 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW
  427. 0 0 dmz2net all -- * eth1 0.0.0.0/0 0.0.0.0/0
  428. 0 0 dmz2loc all -- * br0 0.0.0.0/0 0.0.0.0/0
  429. 0 0 ACCEPT all -- * eth3 0.0.0.0/0 0.0.0.0/0
  430. 0 0 dmz2road all -- * tun+ 0.0.0.0/0 0.0.0.0/0
  431.  
  432. Chain dynamic (9 references)
  433. pkts bytes target prot opt in out source destination
  434.  
  435. Chain fw2dmz (1 references)
  436. pkts bytes target prot opt in out source destination
  437. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  438. 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
  439. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
  440.  
  441. Chain fw2loc (1 references)
  442. pkts bytes target prot opt in out source destination
  443. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:67:68
  444. 16 1588 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  445. 0 0 ~log0 tcp -- * * 0.0.0.0/0 172.16.0.4 [goto] tcp dpt:3551
  446. 0 0 ~log0 udp -- * * 0.0.0.0/0 172.16.0.4 [goto] udp dpt:3052
  447. 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
  448. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:fw2loc:REJECT:'
  449. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
  450.  
  451. Chain fw2net (1 references)
  452. pkts bytes target prot opt in out source destination
  453. 127 42547 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  454. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:123
  455. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:123
  456. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:43
  457. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
  458. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:53
  459. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 21,80,25
  460. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 21,80
  461. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
  462. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:500
  463. 0 0 ACCEPT esp -- * * 0.0.0.0/0 0.0.0.0/0
  464. 0 0 ACCEPT ah -- * * 0.0.0.0/0 0.0.0.0/0
  465. 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
  466. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
  467.  
  468. Chain fw2road (1 references)
  469. pkts bytes target prot opt in out source destination
  470. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  471. 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
  472. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:fw2road:REJECT:'
  473. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
  474.  
  475. Chain loc2dmz (1 references)
  476. pkts bytes target prot opt in out source destination
  477. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  478. 0 0 ~log5 tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] multiport dports 497,80,22,8111,3306,8080,8081,8000,5666,1311,8180,443
  479. 0 0 ~log6 icmp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] icmp type 8
  480. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 192.168.0.5 ctorigdst ticket.raytion.com multiport dports 80,8080,443,3306
  481. 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
  482. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
  483.  
  484. Chain loc2fw (1 references)
  485. pkts bytes target prot opt in out source destination
  486. 4 819 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW
  487. 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:67:68
  488. 4 819 br0_mac all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate NEW
  489. 16 1072 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  490. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5666
  491. 0 0 ~log7 tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] multiport dports 497,80,3306,22
  492. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8
  493. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 8987,943
  494. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8 /* Ping */
  495. 3 741 Reject all -- * * 0.0.0.0/0 0.0.0.0/0
  496. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
  497.  
  498. Chain loc2loc (1 references)
  499. pkts bytes target prot opt in out source destination
  500. 222 44400 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  501. 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8 /* Ping */
  502. 3 741 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  503.  
  504. Chain loc2net (1 references)
  505. pkts bytes target prot opt in out source destination
  506. 38 5404 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  507. 9 687 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  508.  
  509. Chain loc2road (1 references)
  510. pkts bytes target prot opt in out source destination
  511. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  512. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  513.  
  514. Chain loc_frwd (1 references)
  515. pkts bytes target prot opt in out source destination
  516. 20 2258 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW
  517. 0 0 ACCEPT udp -- * br0 0.0.0.0/0 0.0.0.0/0 udp dpts:67:68
  518. 20 2258 br0_mac all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate NEW
  519. 47 6091 loc2net all -- * eth1 0.0.0.0/0 0.0.0.0/0
  520. 225 45141 loc2loc all -- * br0 0.0.0.0/0 0.0.0.0/0
  521. 0 0 loc2dmz all -- * eth3 0.0.0.0/0 0.0.0.0/0
  522. 0 0 loc2road all -- * tun+ 0.0.0.0/0 0.0.0.0/0
  523.  
  524. Chain logdrop (0 references)
  525. pkts bytes target prot opt in out source destination
  526. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:logdrop:DROP:'
  527. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  528.  
  529. Chain logflags (5 references)
  530. pkts bytes target prot opt in out source destination
  531. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 4 level 6 prefix `Shorewall:logflags:DROP:'
  532. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  533.  
  534. Chain logreject (0 references)
  535. pkts bytes target prot opt in out source destination
  536. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:logreject:REJECT:'
  537. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0
  538.  
  539. Chain net2dmz (1 references)
  540. pkts bytes target prot opt in out source destination
  541. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  542. 0 0 ~log2 tcp -- * * 0.0.0.0/0 192.168.0.5 [goto] ctorigdst ticket.raytion.com multiport dports 80,443
  543. 0 0 Drop all -- * * 0.0.0.0/0 0.0.0.0/0
  544. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:net2dmz:DROP:'
  545. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  546.  
  547. Chain net2fw (1 references)
  548. pkts bytes target prot opt in out source destination
  549. 1 63 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW
  550. 1 63 blacklst all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW
  551. 1 63 tcpflags tcp -- * * 0.0.0.0/0 0.0.0.0/0
  552. 113 31360 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  553. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443
  554. 0 0 ~log1 udp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] udp dpt:1194
  555. 0 0 ~log1 udp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] multiport dports 500,4500,1701
  556. 1 63 Drop all -- * * 0.0.0.0/0 0.0.0.0/0
  557. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 7 prefix `Shorewall:net2fw:DROP:'
  558. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  559.  
  560. Chain net2loc (1 references)
  561. pkts bytes target prot opt in out source destination
  562. 31 8923 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  563. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 172.16.0.9 tcp dpt:1022
  564. 0 0 ACCEPT tcp -- * * 0.0.0.0/0 172.16.0.9 tcp dpt:25 ctorigdst mail.raytion.com
  565. 0 0 Drop all -- * * 0.0.0.0/0 0.0.0.0/0
  566. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 7 prefix `Shorewall:net2loc:DROP:'
  567. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  568.  
  569. Chain net2road (1 references)
  570. pkts bytes target prot opt in out source destination
  571. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  572. 0 0 Drop all -- * * 0.0.0.0/0 0.0.0.0/0
  573. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  574.  
  575. Chain net_frwd (1 references)
  576. pkts bytes target prot opt in out source destination
  577. 0 0 sfilter all -- * eth1 0.0.0.0/0 0.0.0.0/0 [goto]
  578. 0 0 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW
  579. 0 0 blacklst all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW
  580. 31 8923 tcpflags tcp -- * * 0.0.0.0/0 0.0.0.0/0
  581. 31 8923 net2loc all -- * br0 0.0.0.0/0 0.0.0.0/0
  582. 0 0 net2dmz all -- * eth3 0.0.0.0/0 0.0.0.0/0
  583. 0 0 net2road all -- * tun+ 0.0.0.0/0 0.0.0.0/0
  584.  
  585. Chain reject (21 references)
  586. pkts bytes target prot opt in out source destination
  587. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match src-type BROADCAST
  588. 0 0 DROP all -- * * 224.0.0.0/4 0.0.0.0/0
  589. 0 0 DROP 2 -- * * 0.0.0.0/0 0.0.0.0/0
  590. 5 268 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset
  591. 4 640 REJECT udp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
  592. 0 0 REJECT icmp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-unreachable
  593. 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
  594.  
  595. Chain road2dmz (1 references)
  596. pkts bytes target prot opt in out source destination
  597. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  598. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  599.  
  600. Chain road2fw (1 references)
  601. pkts bytes target prot opt in out source destination
  602. 0 0 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW
  603. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  604. 0 0 Drop all -- * * 0.0.0.0/0 0.0.0.0/0
  605. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  606.  
  607. Chain road2loc (1 references)
  608. pkts bytes target prot opt in out source destination
  609. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  610. 0 0 ACCEPT tcp -- * * 10.8.0.218 172.16.0.9 multiport dports 143,25
  611. 0 0 ACCEPT tcp -- * * 10.8.0.218 172.16.0.33 tcp dpt:3389
  612. 0 0 ACCEPT udp -- * * 10.8.0.218 172.16.0.5 udp dpt:53
  613. 0 0 ACCEPT udp -- * * 10.8.0.218 172.16.0.11 udp dpt:53
  614. 0 0 ~log8 tcp -- * * 10.8.0.218 172.16.125.111 [goto]
  615. 0 0 ~log9 tcp -- * * 10.8.0.218 0.0.0.0/0 [goto]
  616. 0 0 ~log9 udp -- * * 10.8.0.218 0.0.0.0/0 [goto]
  617. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  618.  
  619. Chain road2net (1 references)
  620. pkts bytes target prot opt in out source destination
  621. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
  622. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  623.  
  624. Chain road_frwd (1 references)
  625. pkts bytes target prot opt in out source destination
  626. 0 0 sfilter all -- * tun+ 0.0.0.0/0 0.0.0.0/0 [goto]
  627. 0 0 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW
  628. 0 0 road2net all -- * eth1 0.0.0.0/0 0.0.0.0/0
  629. 0 0 road2loc all -- * br0 0.0.0.0/0 0.0.0.0/0
  630. 0 0 road2dmz all -- * eth3 0.0.0.0/0 0.0.0.0/0
  631.  
  632. Chain sfilter (2 references)
  633. pkts bytes target prot opt in out source destination
  634. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:sfilter:DROP:'
  635. 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
  636.  
  637. Chain shorewall (0 references)
  638. pkts bytes target prot opt in out source destination
  639.  
  640. Chain tcpflags (2 references)
  641. pkts bytes target prot opt in out source destination
  642. 0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcp flags:0x3F/0x29
  643. 0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcp flags:0x3F/0x00
  644. 0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcp flags:0x06/0x06
  645. 0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcp flags:0x03/0x03
  646. 0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcp spt:0 flags:0x17/0x02
  647.  
  648. Chain ~log0 (2 references)
  649. pkts bytes target prot opt in out source destination
  650. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:fw2loc:ACCEPT:'
  651. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  652.  
  653. Chain ~log1 (2 references)
  654. pkts bytes target prot opt in out source destination
  655. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:net2fw:ACCEPT:'
  656. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  657.  
  658. Chain ~log2 (1 references)
  659. pkts bytes target prot opt in out source destination
  660. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:net2dmz:ACCEPT:'
  661. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  662.  
  663. Chain ~log3 (3 references)
  664. pkts bytes target prot opt in out source destination
  665. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:dmz2net:ACCEPT:'
  666. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  667.  
  668. Chain ~log4 (1 references)
  669. pkts bytes target prot opt in out source destination
  670. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:dmz2loc:ACCEPT:'
  671. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  672.  
  673. Chain ~log5 (1 references)
  674. pkts bytes target prot opt in out source destination
  675. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:loc2dmz:ACCEPT:'
  676. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  677.  
  678. Chain ~log6 (1 references)
  679. pkts bytes target prot opt in out source destination
  680. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 7 prefix `Shorewall:loc2dmz:ACCEPT:'
  681. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  682.  
  683. Chain ~log7 (1 references)
  684. pkts bytes target prot opt in out source destination
  685. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:loc2fw:ACCEPT:'
  686. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  687.  
  688. Chain ~log8 (1 references)
  689. pkts bytes target prot opt in out source destination
  690. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:road2loc:ACCEPT:'
  691. 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
  692.  
  693. Chain ~log9 (2 references)
  694. pkts bytes target prot opt in out source destination
  695. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:road2loc:REJECT:'
  696. 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0
  697.  
  698. Log (/var/log/messages)
  699.  
  700. Sep 1 14:26:19 br0_mac:REJECT:IN=br0 OUT=eth1 PHYSIN=eth0 SRC=172.16.131.2 DST=208.73.214.9 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=27203 DF PROTO=TCP SPT=12369 DPT=389 WINDOW=8192 RES=0x00 SYN URGP=0
  701. Sep 1 14:26:19 br0_mac:REJECT:IN=br0 OUT=eth1 PHYSIN=eth0 SRC=172.16.131.2 DST=208.73.214.9 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=27204 DF PROTO=TCP SPT=12370 DPT=3268 WINDOW=8192 RES=0x00 SYN URGP=0
  702. Sep 1 14:26:19 br0_mac:REJECT:IN=br0 OUT= PHYSIN=eth0 SRC=172.16.129.7 DST=172.16.255.255 LEN=78 TOS=0x00 PREC=0x00 TTL=128 ID=3915 PROTO=UDP SPT=137 DPT=137 LEN=58
  703. Sep 1 14:26:19 br0_mac:REJECT:IN=br0 OUT=br0 PHYSIN=eth0 PHYSOUT=tap0 SRC=172.16.129.7 DST=172.16.255.255 LEN=78 TOS=0x00 PREC=0x00 TTL=128 ID=3915 PROTO=UDP SPT=137 DPT=137 LEN=58
  704. Sep 1 14:26:20 br0_mac:REJECT:IN=br0 OUT=br0 PHYSIN=eth0 PHYSOUT=tap0 SRC=172.16.125.111 DST=239.255.47.11 LEN=242 TOS=0x00 PREC=0x00 TTL=1 ID=7357 PROTO=UDP SPT=1057 DPT=4711 LEN=222
  705. Sep 1 14:26:20 br0_mac:REJECT:IN=br0 OUT=br0 PHYSIN=tap0 PHYSOUT=eth0 SRC=172.16.254.12 DST=172.16.0.5 LEN=66 TOS=0x00 PREC=0x00 TTL=64 ID=15892 DF PROTO=UDP SPT=60934 DPT=53 LEN=46
  706. Sep 1 14:26:20 br0_mac:REJECT:IN=br0 OUT=br0 PHYSIN=tap0 PHYSOUT=eth0 SRC=172.16.254.12 DST=172.16.0.11 LEN=66 TOS=0x00 PREC=0x00 TTL=64 ID=15892 DF PROTO=UDP SPT=60934 DPT=53 LEN=46
  707. Sep 1 14:26:20 br0_mac:REJECT:IN=br0 OUT=br0 PHYSIN=tap0 PHYSOUT=eth0 SRC=172.16.254.12 DST=172.16.0.5 LEN=66 TOS=0x00 PREC=0x00 TTL=64 ID=15893 DF PROTO=UDP SPT=60934 DPT=53 LEN=46
  708. Sep 1 14:26:20 br0_mac:REJECT:IN=br0 OUT=br0 PHYSIN=tap0 PHYSOUT=eth0 SRC=172.16.254.12 DST=172.16.0.11 LEN=66 TOS=0x00 PREC=0x00 TTL=64 ID=15893 DF PROTO=UDP SPT=60934 DPT=53 LEN=46
  709. Sep 1 14:26:20 br0_mac:REJECT:IN=br0 OUT=br0 PHYSIN=tap0 PHYSOUT=eth0 SRC=172.16.254.12 DST=172.16.0.5 LEN=66 TOS=0x00 PREC=0x00 TTL=64 ID=15894 DF PROTO=UDP SPT=60934 DPT=53 LEN=46
  710. Sep 1 14:26:20 br0_mac:REJECT:IN=br0 OUT=br0 PHYSIN=tap0 PHYSOUT=eth0 SRC=172.16.254.12 DST=172.16.0.11 LEN=66 TOS=0x00 PREC=0x00 TTL=64 ID=15895 DF PROTO=UDP SPT=60934 DPT=53 LEN=46
  711. Sep 1 14:26:21 br0_mac:REJECT:IN=br0 OUT=br0 PHYSIN=eth0 PHYSOUT=tap0 SRC=172.16.125.111 DST=239.255.47.11 LEN=242 TOS=0x00 PREC=0x00 TTL=1 ID=7571 PROTO=UDP SPT=1057 DPT=4711 LEN=222
  712. Sep 1 14:26:22 br0_mac:REJECT:IN=br0 OUT= PHYSIN=eth0 SRC=172.16.129.7 DST=172.16.255.255 LEN=78 TOS=0x00 PREC=0x00 TTL=128 ID=3923 PROTO=UDP SPT=137 DPT=137 LEN=58
  713. Sep 1 14:26:22 br0_mac:REJECT:IN=br0 OUT=br0 PHYSIN=eth0 PHYSOUT=tap0 SRC=172.16.129.7 DST=172.16.255.255 LEN=78 TOS=0x00 PREC=0x00 TTL=128 ID=3923 PROTO=UDP SPT=137 DPT=137 LEN=58
  714. Sep 1 14:26:22 br0_mac:REJECT:IN=br0 OUT=br0 PHYSIN=eth0 PHYSOUT=tap0 SRC=172.16.125.111 DST=239.255.47.11 LEN=242 TOS=0x00 PREC=0x00 TTL=1 ID=7672 PROTO=UDP SPT=1057 DPT=4711 LEN=222
  715. Sep 1 14:26:22 br0_mac:REJECT:IN=br0 OUT=br0 PHYSIN=eth0 PHYSOUT=tap0 SRC=172.16.30.17 DST=239.255.255.250 LEN=294 TOS=0x00 PREC=0x00 TTL=1 ID=37080 PROTO=UDP SPT=1024 DPT=1900 LEN=274
  716. Sep 1 14:26:22 br0_mac:REJECT:IN=br0 OUT= PHYSIN=eth0 SRC=172.16.129.7 DST=172.16.255.255 LEN=78 TOS=0x00 PREC=0x00 TTL=128 ID=3924 PROTO=UDP SPT=137 DPT=137 LEN=58
  717. Sep 1 14:26:22 br0_mac:REJECT:IN=br0 OUT=br0 PHYSIN=eth0 PHYSOUT=tap0 SRC=172.16.129.7 DST=172.16.255.255 LEN=78 TOS=0x00 PREC=0x00 TTL=128 ID=3924 PROTO=UDP SPT=137 DPT=137 LEN=58
  718. Sep 1 14:26:23 br0_mac:REJECT:IN=br0 OUT=br0 PHYSIN=eth0 PHYSOUT=tap0 SRC=172.16.125.111 DST=239.255.47.11 LEN=242 TOS=0x00 PREC=0x00 TTL=1 ID=7693 PROTO=UDP SPT=1057 DPT=4711 LEN=222
  719. Sep 1 14:26:23 br0_mac:REJECT:IN=br0 OUT=br0 PHYSIN=eth0 PHYSOUT=tap0 SRC=172.16.30.17 DST=239.255.255.250 LEN=338 TOS=0x00 PREC=0x00 TTL=1 ID=37090 PROTO=UDP SPT=1024 DPT=1900 LEN=318
  720.  
  721. NAT Table
  722.  
  723. Chain PREROUTING (policy ACCEPT 10 packets, 1006 bytes)
  724. pkts bytes target prot opt in out source destination
  725. 10 1006 dnat all -- * * 0.0.0.0/0 0.0.0.0/0
  726. 0 0 eth1_in all -- eth1 * 0.0.0.0/0 0.0.0.0/0
  727.  
  728. Chain POSTROUTING (policy ACCEPT 10 packets, 1012 bytes)
  729. pkts bytes target prot opt in out source destination
  730. 11 768 eth1_out all -- * eth1 0.0.0.0/0 0.0.0.0/0
  731. 11 768 eth1_masq all -- * eth1 0.0.0.0/0 0.0.0.0/0
  732. 0 0 eth3_masq all -- * eth3 0.0.0.0/0 0.0.0.0/0
  733.  
  734. Chain OUTPUT (policy ACCEPT 6 packets, 438 bytes)
  735. pkts bytes target prot opt in out source destination
  736.  
  737. Chain dnat (1 references)
  738. pkts bytes target prot opt in out source destination
  739. 0 0 net_dnat all -- eth1 * 0.0.0.0/0 0.0.0.0/0
  740. 10 1006 loc_dnat all -- br0 * 0.0.0.0/0 0.0.0.0/0
  741.  
  742. Chain eth1_in (1 references)
  743. pkts bytes target prot opt in out source destination
  744. 0 0 DNAT all -- * * 0.0.0.0/0 xxx.xxx.xxx.19 to:192.168.0.5
  745.  
  746. Chain eth1_masq (1 references)
  747. pkts bytes target prot opt in out source destination
  748. 0 0 SNAT tcp -- * * 172.16.0.0/16 0.0.0.0/0 tcp dpt:25 to:xxx.xxx.xxx.20
  749. 1 60 SNAT tcp -- * * 172.16.0.0/16 0.0.0.0/0 tcp dpt:80 to:xxx.xxx.xxx.21
  750. 0 0 SNAT tcp -- * * 172.16.0.0/16 0.0.0.0/0 multiport dports 3306,3389,5405 to:xxx.xxx.xxx.18
  751. 0 0 SNAT tcp -- * * 172.16.0.0/16 0.0.0.0/0 tcp dpt:3299 to:xxx.xxx.xxx.22
  752. 4 270 MASQUERADE all -- * * 172.16.0.0/16 0.0.0.0/0
  753.  
  754. Chain eth1_out (1 references)
  755. pkts bytes target prot opt in out source destination
  756. 0 0 SNAT all -- * * 192.168.0.5 0.0.0.0/0 to:xxx.xxx.xxx.19
  757.  
  758. Chain eth3_masq (1 references)
  759. pkts bytes target prot opt in out source destination
  760. 0 0 MASQUERADE all -- * * 192.168.0.0/24 0.0.0.0/0
  761.  
  762. Chain loc_dnat (1 references)
  763. pkts bytes target prot opt in out source destination
  764. 0 0 ~log0 tcp -- * * 0.0.0.0/0 xxx.xxx.xxx.19 [goto] multiport dports 80,8080,443,3306
  765.  
  766. Chain net_dnat (1 references)
  767. pkts bytes target prot opt in out source destination
  768. 0 0 ~log1 tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcp dpt:1022
  769. 0 0 DNAT tcp -- * * 0.0.0.0/0 xxx.xxx.xxx.20 tcp dpt:25 to:172.16.0.9
  770.  
  771. Chain ~log0 (1 references)
  772. pkts bytes target prot opt in out source destination
  773. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:loc_dnat:DNAT:'
  774. 0 0 DNAT all -- * * 0.0.0.0/0 0.0.0.0/0 to:192.168.0.5
  775.  
  776. Chain ~log1 (1 references)
  777. pkts bytes target prot opt in out source destination
  778. 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:net_dnat:DNAT:'
  779. 0 0 DNAT all -- * * 0.0.0.0/0 0.0.0.0/0 to:172.16.0.9
  780.  
  781. Mangle Table
  782.  
  783. Chain PREROUTING (policy ACCEPT 469 packets, 98928 bytes)
  784. pkts bytes target prot opt in out source destination
  785. 469 98928 tcpre all -- * * 0.0.0.0/0 0.0.0.0/0
  786.  
  787. Chain INPUT (policy ACCEPT 147 packets, 35803 bytes)
  788. pkts bytes target prot opt in out source destination
  789. 147 35803 tcin all -- * * 0.0.0.0/0 0.0.0.0/0
  790.  
  791. Chain FORWARD (policy ACCEPT 326 packets, 63944 bytes)
  792. pkts bytes target prot opt in out source destination
  793. 326 63944 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 MARK and 0xffffff00
  794. 326 63944 tcfor all -- * * 0.0.0.0/0 0.0.0.0/0
  795.  
  796. Chain OUTPUT (policy ACCEPT 156 packets, 46241 bytes)
  797. pkts bytes target prot opt in out source destination
  798. 156 46241 tcout all -- * * 0.0.0.0/0 0.0.0.0/0
  799.  
  800. Chain POSTROUTING (policy ACCEPT 473 packets, 109K bytes)
  801. pkts bytes target prot opt in out source destination
  802. 473 109K tcpost all -- * * 0.0.0.0/0 0.0.0.0/0
  803.  
  804. Chain tcfor (1 references)
  805. pkts bytes target prot opt in out source destination
  806.  
  807. Chain tcin (1 references)
  808. pkts bytes target prot opt in out source destination
  809.  
  810. Chain tcout (1 references)
  811. pkts bytes target prot opt in out source destination
  812.  
  813. Chain tcpost (1 references)
  814. pkts bytes target prot opt in out source destination
  815. 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 helper match "sip" MARK xset 0x1/0xffff
  816.  
  817. Chain tcpre (1 references)
  818. pkts bytes target prot opt in out source destination
  819.  
  820. Raw Table
  821.  
  822. Chain PREROUTING (policy ACCEPT 472 packets, 99608 bytes)
  823. pkts bytes target prot opt in out source destination
  824.  
  825. Chain OUTPUT (policy ACCEPT 157 packets, 46521 bytes)
  826. pkts bytes target prot opt in out source destination
  827.  
  828. Conntrack Table (521 out of 65520)
  829.  
  830. tcp 6 337610 ESTABLISHED src=172.16.99.22 dst=172.16.0.65 sport=57513 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.22 sport=80 dport=57513 packets=0 bytes=0 mark=0 secmark=0 use=1
  831. tcp 6 428853 ESTABLISHED src=172.16.99.3 dst=172.16.0.65 sport=59005 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.3 sport=80 dport=59005 packets=0 bytes=0 mark=0 secmark=0 use=1
  832. tcp 6 431867 ESTABLISHED src=172.16.128.21 dst=172.16.0.11 sport=54763 dport=139 packets=64290 bytes=5520782 src=172.16.0.11 dst=172.16.128.21 sport=139 dport=54763 packets=97461 bytes=101519568 [ASSURED] mark=0 secmark=0 use=1
  833. tcp 6 5 TIME_WAIT src=172.16.33.4 dst=217.72.200.153 sport=53902 dport=80 packets=24 bytes=4706 src=217.72.200.153 dst=xxx.xxx.xxx.21 sport=80 dport=53902 packets=32 bytes=30219 [ASSURED] mark=0 secmark=0 use=1
  834. tcp 6 405231 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=57547 dport=7635 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=7635 dport=57547 packets=0 bytes=0 mark=0 secmark=0 use=1
  835. tcp 6 423107 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=34924 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=34924 packets=0 bytes=0 mark=0 secmark=0 use=1
  836. tcp 6 29 TIME_WAIT src=172.16.99.25 dst=213.244.185.36 sport=54444 dport=80 packets=7 bytes=758 src=213.244.185.36 dst=xxx.xxx.xxx.21 sport=80 dport=54444 packets=8 bytes=2998 [ASSURED] mark=0 secmark=0 use=1
  837. tcp 6 232330 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=64150 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=64150 packets=0 bytes=0 mark=0 secmark=0 use=1
  838. tcp 6 346106 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=40365 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=40365 packets=0 bytes=0 mark=0 secmark=0 use=1
  839. tcp 6 338150 ESTABLISHED src=172.16.99.22 dst=172.16.0.65 sport=57664 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.22 sport=80 dport=57664 packets=0 bytes=0 mark=0 secmark=0 use=1
  840. tcp 6 428853 ESTABLISHED src=172.16.99.3 dst=172.16.0.65 sport=59008 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.3 sport=80 dport=59008 packets=0 bytes=0 mark=0 secmark=0 use=1
  841. tcp 6 5 TIME_WAIT src=172.16.33.4 dst=217.72.200.153 sport=53896 dport=80 packets=40 bytes=6859 src=217.72.200.153 dst=xxx.xxx.xxx.21 sport=80 dport=53896 packets=52 bytes=63371 [ASSURED] mark=0 secmark=0 use=1
  842. tcp 6 330298 ESTABLISHED src=172.16.99.4 dst=172.16.0.65 sport=46271 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.4 sport=80 dport=46271 packets=0 bytes=0 mark=0 secmark=0 use=1
  843. tcp 6 61 TIME_WAIT src=172.16.99.22 dst=194.63.248.44 sport=53077 dport=80 packets=12 bytes=2343 src=194.63.248.44 dst=xxx.xxx.xxx.21 sport=80 dport=53077 packets=15 bytes=11570 [ASSURED] mark=0 secmark=0 use=1
  844. tcp 6 431981 ESTABLISHED src=172.16.99.4 dst=74.125.79.102 sport=46327 dport=80 packets=9 bytes=3123 src=74.125.79.102 dst=xxx.xxx.xxx.21 sport=80 dport=46327 packets=7 bytes=3030 [ASSURED] mark=0 secmark=0 use=1
  845. tcp 6 21904 ESTABLISHED src=172.16.0.9 dst=10.8.0.18 sport=143 dport=49883 packets=1 bytes=65 [UNREPLIED] src=10.8.0.18 dst=172.16.0.9 sport=49883 dport=143 packets=0 bytes=0 mark=0 secmark=0 use=1
  846. tcp 6 431997 ESTABLISHED src=172.16.99.5 dst=209.85.227.100 sport=52573 dport=80 packets=7 bytes=1186 src=209.85.227.100 dst=xxx.xxx.xxx.21 sport=80 dport=52573 packets=6 bytes=648 [ASSURED] mark=0 secmark=0 use=1
  847. tcp 6 87 TIME_WAIT src=172.16.99.5 dst=209.85.148.147 sport=34992 dport=80 packets=5 bytes=268 src=209.85.148.147 dst=xxx.xxx.xxx.21 sport=80 dport=34992 packets=3 bytes=164 [ASSURED] mark=0 secmark=0 use=1
  848. tcp 6 156680 ESTABLISHED src=172.16.99.41 dst=172.16.0.65 sport=43989 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.41 sport=80 dport=43989 packets=0 bytes=0 mark=0 secmark=0 use=1
  849. tcp 6 412132 ESTABLISHED src=172.16.98.13 dst=172.16.130.20 sport=16050 dport=56660 packets=1207 bytes=71497 [UNREPLIED] src=172.16.130.20 dst=172.16.98.13 sport=56660 dport=16050 packets=0 bytes=0 mark=0 secmark=0 use=1
  850. tcp 6 102 TIME_WAIT src=172.16.99.4 dst=141.6.2.171 sport=35318 dport=80 packets=7 bytes=761 src=141.6.2.171 dst=xxx.xxx.xxx.21 sport=80 dport=35318 packets=5 bytes=376 [ASSURED] mark=0 secmark=0 use=1
  851. tcp 6 14 TIME_WAIT src=172.16.99.25 dst=209.85.148.104 sport=54408 dport=80 packets=8 bytes=2656 src=209.85.148.104 dst=xxx.xxx.xxx.21 sport=80 dport=54408 packets=7 bytes=5408 [ASSURED] mark=0 secmark=0 use=1
  852. udp 17 20 src=172.16.99.24 dst=224.0.0.252 sport=59034 dport=5355 packets=1 bytes=52 [UNREPLIED] src=224.0.0.252 dst=172.16.99.24 sport=5355 dport=59034 packets=0 bytes=0 mark=0 secmark=0 use=1
  853. tcp 6 1 TIME_WAIT src=172.16.33.4 dst=217.72.204.116 sport=53900 dport=80 packets=5 bytes=1022 src=217.72.204.116 dst=xxx.xxx.xxx.21 sport=80 dport=53900 packets=5 bytes=1404 [ASSURED] mark=0 secmark=0 use=1
  854. tcp 6 431189 ESTABLISHED src=172.16.98.15 dst=172.16.0.9 sport=33416 dport=143 packets=1452 bytes=105525 src=172.16.0.9 dst=172.16.98.15 sport=143 dport=33416 packets=878 bytes=87177 [ASSURED] mark=0 secmark=0 use=1
  855. tcp 6 431998 ESTABLISHED src=172.16.99.5 dst=209.85.148.155 sport=43418 dport=80 packets=9 bytes=1766 src=209.85.148.155 dst=xxx.xxx.xxx.21 sport=80 dport=43418 packets=8 bytes=5044 [ASSURED] mark=0 secmark=0 use=1
  856. tcp 6 268370 ESTABLISHED src=172.16.99.25 dst=172.16.0.75 sport=53471 dport=445 packets=44 bytes=10657 src=172.16.0.75 dst=172.16.99.25 sport=445 dport=53471 packets=41 bytes=7457 [ASSURED] mark=0 secmark=0 use=1
  857. udp 17 8 src=172.16.98.15 dst=255.255.255.255 sport=17500 dport=17500 packets=1 bytes=147 [UNREPLIED] src=255.255.255.255 dst=172.16.98.15 sport=17500 dport=17500 packets=0 bytes=0 mark=0 secmark=0 use=1
  858. tcp 6 421951 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=32783 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=32783 packets=0 bytes=0 mark=0 secmark=0 use=1
  859. tcp 6 431803 ESTABLISHED src=172.16.0.75 dst=172.16.0.70 sport=50132 dport=5722 packets=3543 bytes=152030 src=172.16.0.70 dst=172.16.0.75 sport=5722 dport=50132 packets=3544 bytes=185615 [ASSURED] mark=0 secmark=0 use=1
  860. tcp 6 346107 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=40364 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=40364 packets=0 bytes=0 mark=0 secmark=0 use=1
  861. tcp 6 428853 ESTABLISHED src=172.16.99.3 dst=172.16.0.65 sport=59006 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.3 sport=80 dport=59006 packets=0 bytes=0 mark=0 secmark=0 use=1
  862. tcp 6 405135 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=57491 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=57491 packets=0 bytes=0 mark=0 secmark=0 use=1
  863. udp 17 27 src=172.16.129.7 dst=128.63.2.53 sport=49847 dport=53 packets=1 bytes=74 [UNREPLIED] src=128.63.2.53 dst=172.16.129.7 sport=53 dport=49847 packets=0 bytes=0 mark=0 secmark=0 use=1
  864. tcp 6 431981 ESTABLISHED src=172.16.99.5 dst=209.85.148.104 sport=54286 dport=80 packets=2 bytes=112 src=209.85.148.104 dst=xxx.xxx.xxx.21 sport=80 dport=54286 packets=1 bytes=60 [ASSURED] mark=0 secmark=0 use=1
  865. tcp 6 196207 ESTABLISHED src=172.16.0.9 dst=10.8.0.30 sport=143 dport=55223 packets=1 bytes=65 [UNREPLIED] src=10.8.0.30 dst=172.16.0.9 sport=55223 dport=143 packets=0 bytes=0 mark=0 secmark=0 use=1
  866. tcp 6 115 TIME_WAIT src=172.16.0.62 dst=172.16.0.75 sport=64504 dport=49158 packets=7 bytes=1572 src=172.16.0.75 dst=172.16.0.62 sport=49158 dport=64504 packets=5 bytes=1372 [ASSURED] mark=0 secmark=0 use=1
  867. tcp 6 431999 ESTABLISHED src=172.16.99.9 dst=172.16.0.2 sport=37728 dport=22 packets=4331 bytes=282107 src=172.16.0.2 dst=172.16.99.9 sport=22 dport=37728 packets=3633 bytes=819803 [ASSURED] mark=0 secmark=0 use=1
  868. tcp 6 421952 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=32782 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=32782 packets=0 bytes=0 mark=0 secmark=0 use=1
  869. tcp 6 405103 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=57487 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=57487 packets=0 bytes=0 mark=0 secmark=0 use=1
  870. tcp 6 10 TIME_WAIT src=172.16.44.14 dst=141.6.2.171 sport=55814 dport=80 packets=6 bytes=694 src=141.6.2.171 dst=xxx.xxx.xxx.21 sport=80 dport=55814 packets=5 bytes=316 [ASSURED] mark=0 secmark=0 use=1
  871. udp 17 21 src=172.16.66.10 dst=172.16.255.255 sport=631 dport=631 packets=1 bytes=244 [UNREPLIED] src=172.16.255.255 dst=172.16.66.10 sport=631 dport=631 packets=0 bytes=0 mark=0 secmark=0 use=1
  872. tcp 6 428970 ESTABLISHED src=172.16.99.41 dst=172.16.0.65 sport=44294 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.41 sport=80 dport=44294 packets=0 bytes=0 mark=0 secmark=0 use=1
  873. tcp 6 431972 ESTABLISHED src=172.16.99.4 dst=141.6.2.171 sport=35317 dport=80 packets=4 bytes=561 src=141.6.2.171 dst=xxx.xxx.xxx.21 sport=80 dport=35317 packets=2 bytes=116 [ASSURED] mark=0 secmark=0 use=1
  874. tcp 6 256736 ESTABLISHED src=172.16.99.51 dst=172.16.0.65 sport=55171 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.51 sport=80 dport=55171 packets=0 bytes=0 mark=0 secmark=0 use=1
  875. tcp 6 421952 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=32778 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=32778 packets=0 bytes=0 mark=0 secmark=0 use=1
  876. udp 17 16 src=172.16.99.43 dst=224.0.0.252 sport=49320 dport=5355 packets=2 bytes=104 [UNREPLIED] src=224.0.0.252 dst=172.16.99.43 sport=5355 dport=49320 packets=0 bytes=0 mark=0 secmark=0 use=1
  877. tcp 6 431995 ESTABLISHED src=172.16.22.76 dst=172.16.22.247 sport=1401 dport=4060 packets=301023 bytes=16917065 src=172.16.22.247 dst=172.16.22.76 sport=4060 dport=1401 packets=301012 bytes=14162412 [ASSURED] mark=0 secmark=0 use=1
  878. udp 17 29 src=xxx.xxx.xxx.18 dst=141.1.1.1 sport=54157 dport=53 packets=1 bytes=73 src=141.1.1.1 dst=xxx.xxx.xxx.18 sport=53 dport=54157 packets=1 bytes=223 mark=0 secmark=0 use=1
  879. udp 17 29 src=172.16.99.24 dst=255.255.255.255 sport=17500 dport=17500 packets=2 bytes=494 [UNREPLIED] src=255.255.255.255 dst=172.16.99.24 sport=17500 dport=17500 packets=0 bytes=0 mark=0 secmark=0 use=1
  880. tcp 6 337610 ESTABLISHED src=172.16.99.22 dst=172.16.0.65 sport=57514 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.22 sport=80 dport=57514 packets=0 bytes=0 mark=0 secmark=0 use=1
  881. udp 17 20 src=172.16.99.24 dst=224.0.0.252 sport=54265 dport=5355 packets=1 bytes=52 [UNREPLIED] src=224.0.0.252 dst=172.16.99.24 sport=5355 dport=54265 packets=0 bytes=0 mark=0 secmark=0 use=1
  882. tcp 6 3 TIME_WAIT src=172.16.33.4 dst=217.72.204.89 sport=53914 dport=80 packets=20 bytes=4231 src=217.72.204.89 dst=xxx.xxx.xxx.21 sport=80 dport=53914 packets=30 bytes=33562 [ASSURED] mark=0 secmark=0 use=1
  883. tcp 6 431981 ESTABLISHED src=172.16.99.5 dst=209.85.148.104 sport=54285 dport=80 packets=2 bytes=112 src=209.85.148.104 dst=xxx.xxx.xxx.21 sport=80 dport=54285 packets=1 bytes=60 [ASSURED] mark=0 secmark=0 use=1
  884. tcp 6 185237 ESTABLISHED src=172.16.0.11 dst=172.16.0.30 sport=2049 dport=833 packets=73 bytes=12264 src=172.16.0.30 dst=172.16.0.11 sport=833 dport=2049 packets=6 bytes=684 [ASSURED] mark=0 secmark=0 use=1
  885. tcp 6 318722 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=52760 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=52760 packets=0 bytes=0 mark=0 secmark=0 use=1
  886. udp 17 20 src=172.16.99.24 dst=224.0.0.252 sport=64756 dport=5355 packets=1 bytes=52 [UNREPLIED] src=224.0.0.252 dst=172.16.99.24 sport=5355 dport=64756 packets=0 bytes=0 mark=0 secmark=0 use=1
  887. tcp 6 425631 ESTABLISHED src=172.16.0.11 dst=172.16.0.34 sport=2049 dport=812 packets=94 bytes=15792 src=172.16.0.34 dst=172.16.0.11 sport=812 dport=2049 packets=7 bytes=876 [ASSURED] mark=0 secmark=0 use=1
  888. tcp 6 431974 ESTABLISHED src=172.16.0.70 dst=172.16.0.75 sport=54280 dport=49155 packets=40 bytes=9916 src=172.16.0.75 dst=172.16.0.70 sport=49155 dport=54280 packets=24 bytes=3188 [ASSURED] mark=0 secmark=0 use=1
  889. tcp 6 19 TIME_WAIT src=172.16.33.4 dst=199.16.83.72 sport=54085 dport=80 packets=6 bytes=785 src=199.16.83.72 dst=xxx.xxx.xxx.21 sport=80 dport=54085 packets=7 bytes=1786 [ASSURED] mark=0 secmark=0 use=1
  890. tcp 6 330292 ESTABLISHED src=172.16.99.41 dst=172.16.0.65 sport=56385 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.41 sport=80 dport=56385 packets=0 bytes=0 mark=0 secmark=0 use=1
  891. udp 17 179 src=172.16.22.247 dst=172.16.22.72 sport=29100 dport=5010 packets=251416 bytes=50283200 src=172.16.22.72 dst=172.16.22.247 sport=5010 dport=29100 packets=251437 bytes=50278820 [ASSURED] mark=0 secmark=0 use=1
  892. tcp 6 52 TIME_WAIT src=172.16.33.4 dst=69.175.67.130 sport=54183 dport=80 packets=5 bytes=716 src=69.175.67.130 dst=xxx.xxx.xxx.21 sport=80 dport=54183 packets=5 bytes=400 [ASSURED] mark=0 secmark=0 use=1
  893. tcp 6 336198 ESTABLISHED src=172.16.0.5 dst=172.16.0.65 sport=40475 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.0.5 sport=80 dport=40475 packets=0 bytes=0 mark=0 secmark=0 use=1
  894. tcp 6 411767 ESTABLISHED src=172.16.98.13 dst=172.16.130.20 sport=16050 dport=56559 packets=108 bytes=9115 [UNREPLIED] src=172.16.130.20 dst=172.16.98.13 sport=56559 dport=16050 packets=0 bytes=0 mark=0 secmark=0 use=1
  895. tcp 6 349088 ESTABLISHED src=172.16.99.25 dst=172.16.0.65 sport=51572 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.99.25 sport=80 dport=51572 packets=0 bytes=0 mark=0 secmark=0 use=1
  896. tcp 6 349088 ESTABLISHED src=172.16.99.25 dst=172.16.0.65 sport=51568 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.99.25 sport=80 dport=51568 packets=0 bytes=0 mark=0 secmark=0 use=1
  897. tcp 6 411940 ESTABLISHED src=172.16.98.13 dst=172.16.130.20 sport=16050 dport=56610 packets=1240 bytes=82502 [UNREPLIED] src=172.16.130.20 dst=172.16.98.13 sport=56610 dport=16050 packets=0 bytes=0 mark=0 secmark=0 use=1
  898. tcp 6 250978 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=52495 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=52495 packets=0 bytes=0 mark=0 secmark=0 use=1
  899. tcp 6 77 TIME_WAIT src=172.16.99.22 dst=194.63.248.44 sport=53079 dport=80 packets=19 bytes=2675 src=194.63.248.44 dst=xxx.xxx.xxx.21 sport=80 dport=53079 packets=18 bytes=18262 [ASSURED] mark=0 secmark=0 use=1
  900. udp 17 3 src=172.16.99.3 dst=255.255.255.255 sport=17500 dport=17500 packets=1 bytes=137 [UNREPLIED] src=255.255.255.255 dst=172.16.99.3 sport=17500 dport=17500 packets=0 bytes=0 mark=0 secmark=0 use=1
  901. tcp 6 431964 ESTABLISHED src=172.16.98.13 dst=172.16.0.11 sport=678 dport=2049 packets=6121 bytes=771784 src=172.16.0.11 dst=172.16.98.13 sport=2049 dport=678 packets=3070 bytes=469444 [ASSURED] mark=0 secmark=0 use=1
  902. tcp 6 421952 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=32784 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=32784 packets=0 bytes=0 mark=0 secmark=0 use=1
  903. tcp 6 428853 ESTABLISHED src=172.16.99.3 dst=172.16.0.65 sport=58996 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.3 sport=80 dport=58996 packets=0 bytes=0 mark=0 secmark=0 use=1
  904. tcp 6 12 TIME_WAIT src=172.16.99.43 dst=69.58.183.140 sport=50607 dport=80 packets=5 bytes=718 src=69.58.183.140 dst=xxx.xxx.xxx.21 sport=80 dport=50607 packets=6 bytes=3475 [ASSURED] mark=0 secmark=0 use=1
  905. tcp 6 159046 ESTABLISHED src=172.16.33.4 dst=172.16.0.65 sport=53049 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.33.4 sport=80 dport=53049 packets=0 bytes=0 mark=0 secmark=0 use=1
  906. tcp 6 327950 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=39525 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=39525 packets=0 bytes=0 mark=0 secmark=0 use=1
  907. tcp 6 99 TIME_WAIT src=172.16.44.14 dst=141.6.2.171 sport=55935 dport=80 packets=6 bytes=730 src=141.6.2.171 dst=xxx.xxx.xxx.21 sport=80 dport=55935 packets=5 bytes=316 [ASSURED] mark=0 secmark=0 use=1
  908. tcp 6 348008 ESTABLISHED src=172.16.99.5 dst=172.16.0.65 sport=58698 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.5 sport=80 dport=58698 packets=0 bytes=0 mark=0 secmark=0 use=1
  909. tcp 6 250963 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=52491 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=52491 packets=0 bytes=0 mark=0 secmark=0 use=1
  910. tcp 6 431992 ESTABLISHED src=172.16.99.5 dst=209.85.227.138 sport=38116 dport=80 packets=10 bytes=2435 src=209.85.227.138 dst=xxx.xxx.xxx.21 sport=80 dport=38116 packets=7 bytes=1596 [ASSURED] mark=0 secmark=0 use=1
  911. tcp 6 424135 ESTABLISHED src=172.16.0.5 dst=172.16.125.23 sport=3690 dport=47756 packets=5 bytes=740 [UNREPLIED] src=172.16.125.23 dst=172.16.0.5 sport=47756 dport=3690 packets=0 bytes=0 mark=0 secmark=0 use=1
  912. udp 17 24 src=xxx.xxx.xxx.18 dst=87.106.252.163 sport=60747 dport=53 packets=1 bytes=73 src=87.106.252.163 dst=xxx.xxx.xxx.18 sport=53 dport=60747 packets=1 bytes=73 mark=0 secmark=0 use=1
  913. tcp 6 12 TIME_WAIT src=172.16.33.4 dst=199.16.83.72 sport=54044 dport=80 packets=6 bytes=785 src=199.16.83.72 dst=xxx.xxx.xxx.21 sport=80 dport=54044 packets=7 bytes=2100 [ASSURED] mark=0 secmark=0 use=1
  914. tcp 6 431936 ESTABLISHED src=172.16.99.4 dst=199.47.216.144 sport=57797 dport=80 packets=243 bytes=64004 src=199.47.216.144 dst=xxx.xxx.xxx.21 sport=80 dport=57797 packets=480 bytes=67749 [ASSURED] mark=0 secmark=0 use=1
  915. tcp 6 256736 ESTABLISHED src=172.16.99.51 dst=172.16.0.65 sport=44910 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.51 sport=80 dport=44910 packets=0 bytes=0 mark=0 secmark=0 use=1
  916. udp 17 12 src=172.16.99.9 dst=172.16.255.255 sport=17500 dport=17500 packets=1 bytes=157 [UNREPLIED] src=172.16.255.255 dst=172.16.99.9 sport=17500 dport=17500 packets=0 bytes=0 mark=0 secmark=0 use=1
  917. tcp 6 318469 ESTABLISHED src=172.16.0.7 dst=172.16.0.75 sport=16731 dport=389 packets=6 bytes=2340 [UNREPLIED] src=172.16.0.75 dst=172.16.0.7 sport=389 dport=16731 packets=0 bytes=0 mark=0 secmark=0 use=1
  918. tcp 6 307515 ESTABLISHED src=172.16.0.7 dst=172.16.0.75 sport=15248 dport=389 packets=6 bytes=2340 [UNREPLIED] src=172.16.0.75 dst=172.16.0.7 sport=389 dport=15248 packets=0 bytes=0 mark=0 secmark=0 use=1
  919. tcp 6 9 TIME_WAIT src=172.16.33.4 dst=199.16.83.72 sport=53946 dport=80 packets=6 bytes=785 src=199.16.83.72 dst=xxx.xxx.xxx.21 sport=80 dport=53946 packets=7 bytes=2100 [ASSURED] mark=0 secmark=0 use=1
  920. tcp 6 103 TIME_WAIT src=172.16.99.35 dst=195.71.11.67 sport=48169 dport=80 packets=9 bytes=885 src=195.71.11.67 dst=xxx.xxx.xxx.21 sport=80 dport=48169 packets=9 bytes=8175 [ASSURED] mark=0 secmark=0 use=1
  921. tcp 6 10 TIME_WAIT src=172.16.33.4 dst=213.165.65.140 sport=53870 dport=80 packets=12 bytes=983 src=213.165.65.140 dst=xxx.xxx.xxx.21 sport=80 dport=53870 packets=18 bytes=20946 [ASSURED] mark=0 secmark=0 use=1
  922. tcp 6 431926 ESTABLISHED src=172.16.99.9 dst=95.100.57.77 sport=46053 dport=80 packets=6 bytes=744 src=95.100.57.77 dst=xxx.xxx.xxx.21 sport=80 dport=46053 packets=6 bytes=5107 [ASSURED] mark=0 secmark=0 use=1
  923. tcp 6 425592 ESTABLISHED src=172.16.0.11 dst=172.16.0.35 sport=2049 dport=622 packets=115 bytes=19068 src=172.16.0.35 dst=172.16.0.11 sport=622 dport=2049 packets=29 bytes=4908 [ASSURED] mark=0 secmark=0 use=1
  924. tcp 6 421952 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=32781 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=32781 packets=0 bytes=0 mark=0 secmark=0 use=1
  925. udp 17 179 src=xxx.xxx.xxx.2 dst=xxx.xxx.xxx.18 sport=1194 dport=1194 packets=109943699 bytes=61035273816 src=xxx.xxx.xxx.18 dst=xxx.xxx.xxx.2 sport=1194 dport=1194 packets=97713506 bytes=69298448696 [ASSURED] mark=0 secmark=0 use=1
  926. tcp 6 430466 ESTABLISHED src=172.16.98.15 dst=172.16.119.24 sport=36513 dport=1521 packets=91 bytes=6392 [UNREPLIED] src=172.16.119.24 dst=172.16.98.15 sport=1521 dport=36513 packets=0 bytes=0 mark=0 secmark=0 use=1
  927. tcp 6 232283 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=64151 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=64151 packets=0 bytes=0 mark=0 secmark=0 use=1
  928. tcp 6 12186 ESTABLISHED src=172.16.0.9 dst=10.8.0.218 sport=143 dport=50084 packets=1 bytes=77 [UNREPLIED] src=10.8.0.218 dst=172.16.0.9 sport=50084 dport=143 packets=0 bytes=0 mark=0 secmark=0 use=1
  929. tcp 6 318722 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=52759 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=52759 packets=0 bytes=0 mark=0 secmark=0 use=1
  930. tcp 6 182162 ESTABLISHED src=172.16.99.25 dst=172.16.0.75 sport=53863 dport=445 packets=44 bytes=10657 src=172.16.0.75 dst=172.16.99.25 sport=445 dport=53863 packets=41 bytes=7457 [ASSURED] mark=0 secmark=0 use=1
  931. tcp 6 431997 ESTABLISHED src=172.16.99.5 dst=209.85.148.147 sport=34986 dport=80 packets=22 bytes=5460 src=209.85.148.147 dst=xxx.xxx.xxx.21 sport=80 dport=34986 packets=19 bytes=13082 [ASSURED] mark=0 secmark=0 use=1
  932. udp 17 3 src=172.16.0.11 dst=172.16.0.162 sport=45873 dport=161 packets=1 bytes=106 src=172.16.0.162 dst=172.16.0.11 sport=161 dport=45873 packets=1 bytes=124 mark=0 secmark=0 use=1
  933. tcp 6 87 TIME_WAIT src=172.16.99.5 dst=64.78.181.5 sport=38038 dport=80 packets=10 bytes=1848 src=64.78.181.5 dst=xxx.xxx.xxx.21 sport=80 dport=38038 packets=9 bytes=3163 [ASSURED] mark=0 secmark=0 use=1
  934. tcp 6 250978 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=52493 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=52493 packets=0 bytes=0 mark=0 secmark=0 use=1
  935. tcp 6 55 TIME_WAIT src=172.16.0.7 dst=172.16.0.75 sport=48213 dport=135 packets=9 bytes=796 src=172.16.0.75 dst=172.16.0.7 sport=135 dport=48213 packets=6 bytes=636 [ASSURED] mark=0 secmark=0 use=1
  936. tcp 6 106 TIME_WAIT src=172.16.99.35 dst=192.9.162.55 sport=39269 dport=80 packets=6 bytes=452 src=192.9.162.55 dst=xxx.xxx.xxx.21 sport=80 dport=39269 packets=5 bytes=414 [ASSURED] mark=0 secmark=0 use=1
  937. tcp 6 431998 ESTABLISHED src=172.16.99.5 dst=209.85.148.155 sport=43417 dport=80 packets=9 bytes=1727 src=209.85.148.155 dst=xxx.xxx.xxx.21 sport=80 dport=43417 packets=8 bytes=4983 [ASSURED] mark=0 secmark=0 use=1
  938. tcp 6 46 TIME_WAIT src=172.16.99.9 dst=172.16.0.2 sport=58475 dport=22 packets=50 bytes=5687 src=172.16.0.2 dst=172.16.99.9 sport=22 dport=58475 packets=50 bytes=211055 [ASSURED] mark=0 secmark=0 use=1
  939. tcp 6 14 TIME_WAIT src=172.16.99.25 dst=74.125.230.74 sport=54413 dport=80 packets=6 bytes=1439 src=74.125.230.74 dst=xxx.xxx.xxx.21 sport=80 dport=54413 packets=6 bytes=3528 [ASSURED] mark=0 secmark=0 use=1
  940. tcp 6 431981 ESTABLISHED src=172.16.99.9 dst=66.102.13.100 sport=38320 dport=80 packets=12 bytes=4787 src=66.102.13.100 dst=xxx.xxx.xxx.21 sport=80 dport=38320 packets=10 bytes=3186 [ASSURED] mark=0 secmark=0 use=1
  941. tcp 6 5 TIME_WAIT src=172.16.33.4 dst=217.72.200.153 sport=53893 dport=80 packets=33 bytes=5076 src=217.72.200.153 dst=xxx.xxx.xxx.21 sport=80 dport=53893 packets=47 bytes=58290 [ASSURED] mark=0 secmark=0 use=1
  942. tcp 6 87 TIME_WAIT src=172.16.99.5 dst=64.78.181.5 sport=38035 dport=80 packets=12 bytes=2647 src=64.78.181.5 dst=xxx.xxx.xxx.21 sport=80 dport=38035 packets=10 bytes=4619 [ASSURED] mark=0 secmark=0 use=1
  943. tcp 6 165575 ESTABLISHED src=172.16.0.9 dst=10.8.0.198 sport=143 dport=53038 packets=1 bytes=77 [UNREPLIED] src=10.8.0.198 dst=172.16.0.9 sport=53038 dport=143 packets=0 bytes=0 mark=0 secmark=0 use=1
  944. udp 17 20 src=172.16.99.24 dst=224.0.0.252 sport=59190 dport=5355 packets=1 bytes=52 [UNREPLIED] src=224.0.0.252 dst=172.16.99.24 sport=5355 dport=59190 packets=0 bytes=0 mark=0 secmark=0 use=1
  945. tcp 6 337190 ESTABLISHED src=172.16.99.22 dst=172.16.0.65 sport=54898 dport=80 packets=20 bytes=8140 [UNREPLIED] src=172.16.0.65 dst=172.16.99.22 sport=80 dport=54898 packets=0 bytes=0 mark=0 secmark=0 use=1
  946. udp 17 1 src=172.16.99.5 dst=255.255.255.255 sport=17500 dport=17500 packets=1 bytes=147 [UNREPLIED] src=255.255.255.255 dst=172.16.99.5 sport=17500 dport=17500 packets=0 bytes=0 mark=0 secmark=0 use=1
  947. tcp 6 35 TIME_WAIT src=172.16.44.14 dst=141.6.2.171 sport=55816 dport=80 packets=6 bytes=694 src=141.6.2.171 dst=xxx.xxx.xxx.21 sport=80 dport=55816 packets=5 bytes=316 [ASSURED] mark=0 secmark=0 use=1
  948. tcp 6 431997 ESTABLISHED src=172.16.99.35 dst=194.97.52.210 sport=37435 dport=8400 packets=4 bytes=208 [UNREPLIED] src=194.97.52.210 dst=172.16.99.35 sport=8400 dport=37435 packets=0 bytes=0 mark=0 secmark=0 use=1
  949. tcp 6 268622 ESTABLISHED src=172.16.0.5 dst=172.16.0.65 sport=49765 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.0.5 sport=80 dport=49765 packets=0 bytes=0 mark=0 secmark=0 use=1
  950. tcp 6 415314 ESTABLISHED src=172.16.98.13 dst=172.16.130.20 sport=16050 dport=57528 packets=356 bytes=32019 [UNREPLIED] src=172.16.130.20 dst=172.16.98.13 sport=57528 dport=16050 packets=0 bytes=0 mark=0 secmark=0 use=1
  951. tcp 6 431927 ESTABLISHED src=172.16.99.24 dst=199.47.216.148 sport=49385 dport=80 packets=159 bytes=72036 src=199.47.216.148 dst=xxx.xxx.xxx.21 sport=80 dport=49385 packets=304 bytes=39196 [ASSURED] mark=0 secmark=0 use=1
  952. tcp 6 425439 ESTABLISHED src=172.16.0.9 dst=172.16.99.2 sport=2049 dport=765 packets=7 bytes=1100 [UNREPLIED] src=172.16.99.2 dst=172.16.0.9 sport=765 dport=2049 packets=0 bytes=0 mark=0 secmark=0 use=1
  953. tcp 6 256736 ESTABLISHED src=172.16.99.51 dst=172.16.0.65 sport=44914 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.51 sport=80 dport=44914 packets=0 bytes=0 mark=0 secmark=0 use=1
  954. tcp 6 431864 ESTABLISHED src=172.16.99.4 dst=195.27.183.168 sport=49798 dport=80 packets=8 bytes=561 src=195.27.183.168 dst=xxx.xxx.xxx.21 sport=80 dport=49798 packets=8 bytes=7869 [ASSURED] mark=0 secmark=0 use=1
  955. udp 17 124 src=172.16.0.5 dst=172.16.0.75 sport=123 dport=123 packets=12219 bytes=928644 src=172.16.0.75 dst=172.16.0.5 sport=123 dport=123 packets=12219 bytes=928644 [ASSURED] mark=0 secmark=0 use=1
  956. tcp 6 13 TIME_WAIT src=172.16.99.43 dst=69.58.183.140 sport=50608 dport=80 packets=5 bytes=735 src=69.58.183.140 dst=xxx.xxx.xxx.21 sport=80 dport=50608 packets=6 bytes=1994 [ASSURED] mark=0 secmark=0 use=1
  957. tcp 6 10 TIME_WAIT src=172.16.33.4 dst=199.16.83.72 sport=54000 dport=80 packets=6 bytes=785 src=199.16.83.72 dst=xxx.xxx.xxx.21 sport=80 dport=54000 packets=7 bytes=2100 [ASSURED] mark=0 secmark=0 use=1
  958. udp 17 27 src=172.16.44.14 dst=239.255.255.250 sport=1900 dport=1900 packets=32 bytes=16260 [UNREPLIED] src=239.255.255.250 dst=172.16.44.14 sport=1900 dport=1900 packets=0 bytes=0 mark=0 secmark=0 use=1
  959. udp 17 15 src=172.16.22.75 dst=172.16.0.5 sport=7611 dport=123 packets=1 bytes=76 src=172.16.0.5 dst=172.16.22.75 sport=123 dport=7611 packets=1 bytes=76 mark=0 secmark=0 use=1
  960. tcp 6 250738 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=46765 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=46765 packets=0 bytes=0 mark=0 secmark=0 use=1
  961. tcp 6 431975 ESTABLISHED src=172.16.98.13 dst=172.16.0.5 sport=59167 dport=5222 packets=6844 bytes=698849 src=172.16.0.5 dst=172.16.98.13 sport=5222 dport=59167 packets=3955 bytes=1486297 [ASSURED] mark=0 secmark=0 use=1
  962. tcp 6 412120 ESTABLISHED src=172.16.98.13 dst=172.16.130.20 sport=16050 dport=56657 packets=163 bytes=12598 [UNREPLIED] src=172.16.130.20 dst=172.16.98.13 sport=56657 dport=16050 packets=0 bytes=0 mark=0 secmark=0 use=1
  963. tcp 6 156680 ESTABLISHED src=172.16.99.41 dst=172.16.0.65 sport=58104 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.41 sport=80 dport=58104 packets=0 bytes=0 mark=0 secmark=0 use=1
  964. tcp 6 431997 ESTABLISHED src=172.16.22.72 dst=172.16.22.247 sport=1401 dport=4060 packets=301622 bytes=16950318 src=172.16.22.247 dst=172.16.22.72 sport=4060 dport=1401 packets=301606 bytes=14201416 [ASSURED] mark=0 secmark=0 use=1
  965. unknown 2 130 src=172.16.33.4 dst=224.0.0.22 packets=5 bytes=200 [UNREPLIED] src=224.0.0.22 dst=172.16.33.4 packets=0 bytes=0 mark=0 secmark=0 use=1
  966. tcp 6 431981 ESTABLISHED src=172.16.99.5 dst=209.85.227.120 sport=36510 dport=80 packets=2 bytes=112 src=209.85.227.120 dst=xxx.xxx.xxx.21 sport=80 dport=36510 packets=1 bytes=60 [ASSURED] mark=0 secmark=0 use=1
  967. tcp 6 418103 ESTABLISHED src=172.16.99.4 dst=172.16.0.65 sport=34069 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.4 sport=80 dport=34069 packets=0 bytes=0 mark=0 secmark=0 use=1
  968. tcp 6 160256 ESTABLISHED src=172.16.33.4 dst=172.16.0.65 sport=53892 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.33.4 sport=80 dport=53892 packets=0 bytes=0 mark=0 secmark=0 use=1
  969. tcp 6 411776 ESTABLISHED src=172.16.98.13 dst=172.16.130.20 sport=16050 dport=56565 packets=332 bytes=21875 [UNREPLIED] src=172.16.130.20 dst=172.16.98.13 sport=56565 dport=16050 packets=0 bytes=0 mark=0 secmark=0 use=1
  970. tcp 6 59483 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=58007 dport=80 packets=94 bytes=6721 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=58007 packets=0 bytes=0 mark=0 secmark=0 use=1
  971. tcp 6 182144 ESTABLISHED src=172.16.99.25 dst=172.16.0.75 sport=53862 dport=49155 packets=9 bytes=3037 src=172.16.0.75 dst=172.16.99.25 sport=49155 dport=53862 packets=7 bytes=1342 [ASSURED] mark=0 secmark=0 use=1
  972. tcp 6 14 TIME_WAIT src=172.16.99.25 dst=74.125.157.120 sport=54414 dport=80 packets=6 bytes=1173 src=74.125.157.120 dst=xxx.xxx.xxx.21 sport=80 dport=54414 packets=4 bytes=387 [ASSURED] mark=0 secmark=0 use=1
  973. tcp 6 57 TIME_WAIT src=172.16.33.4 dst=217.72.204.89 sport=54187 dport=80 packets=6 bytes=848 src=217.72.204.89 dst=xxx.xxx.xxx.21 sport=80 dport=54187 packets=5 bytes=597 [ASSURED] mark=0 secmark=0 use=1
  974. tcp 6 318722 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=52738 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=52738 packets=0 bytes=0 mark=0 secmark=0 use=1
  975. tcp 6 232299 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=64172 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=64172 packets=0 bytes=0 mark=0 secmark=0 use=1
  976. unknown 2 14 src=172.16.0.29 dst=224.0.0.22 packets=6 bytes=240 [UNREPLIED] src=224.0.0.22 dst=172.16.0.29 packets=0 bytes=0 mark=0 secmark=0 use=1
  977. tcp 6 405103 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=57486 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=57486 packets=0 bytes=0 mark=0 secmark=0 use=1
  978. udp 17 20 src=172.16.99.24 dst=224.0.0.252 sport=60405 dport=5355 packets=1 bytes=52 [UNREPLIED] src=224.0.0.252 dst=172.16.99.24 sport=5355 dport=60405 packets=0 bytes=0 mark=0 secmark=0 use=1
  979. tcp 6 39 TIME_WAIT src=172.16.44.14 dst=80.157.150.10 sport=55808 dport=80 packets=19 bytes=1197 src=80.157.150.10 dst=xxx.xxx.xxx.21 sport=80 dport=55808 packets=29 bytes=35377 [ASSURED] mark=0 secmark=0 use=1
  980. tcp 6 330292 ESTABLISHED src=172.16.99.41 dst=172.16.0.65 sport=56386 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.41 sport=80 dport=56386 packets=0 bytes=0 mark=0 secmark=0 use=1
  981. tcp 6 259121 ESTABLISHED src=172.16.33.4 dst=172.16.0.65 sport=59296 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.33.4 sport=80 dport=59296 packets=0 bytes=0 mark=0 secmark=0 use=1
  982. tcp 6 166952 ESTABLISHED src=172.16.0.11 dst=172.16.129.5 sport=48789 dport=57325 packets=4 bytes=6000 [UNREPLIED] src=172.16.129.5 dst=172.16.0.11 sport=57325 dport=48789 packets=0 bytes=0 mark=0 secmark=0 use=1
  983. tcp 6 145930 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=53423 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=53423 packets=0 bytes=0 mark=0 secmark=0 use=1
  984. tcp 6 256402 ESTABLISHED src=172.16.33.4 dst=172.16.0.65 sport=58844 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.33.4 sport=80 dport=58844 packets=0 bytes=0 mark=0 secmark=0 use=1
  985. tcp 6 199525 ESTABLISHED src=172.16.0.9 dst=10.8.0.30 sport=143 dport=55415 packets=1 bytes=65 [UNREPLIED] src=10.8.0.30 dst=172.16.0.9 sport=55415 dport=143 packets=0 bytes=0 mark=0 secmark=0 use=1
  986. tcp 6 1 TIME_WAIT src=172.16.33.4 dst=217.72.204.209 sport=53908 dport=80 packets=6 bytes=965 src=217.72.204.209 dst=xxx.xxx.xxx.21 sport=80 dport=53908 packets=7 bytes=3490 [ASSURED] mark=0 secmark=0 use=1
  987. udp 17 176 src=172.16.254.12 dst=172.16.0.11 sport=60935 dport=53 packets=4 bytes=264 src=172.16.0.11 dst=172.16.254.12 sport=53 dport=60935 packets=4 bytes=464 [ASSURED] mark=0 secmark=0 use=1
  988. tcp 6 22 TIME_WAIT src=172.16.253.132 dst=66.102.13.113 sport=2421 dport=80 packets=10 bytes=2210 src=66.102.13.113 dst=xxx.xxx.xxx.21 sport=80 dport=2421 packets=6 bytes=1699 [ASSURED] mark=0 secmark=0 use=1
  989. tcp 6 337867 ESTABLISHED src=172.16.99.4 dst=172.16.0.65 sport=42502 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.4 sport=80 dport=42502 packets=0 bytes=0 mark=0 secmark=0 use=1
  990. tcp 6 431998 ESTABLISHED src=172.16.99.5 dst=209.85.148.103 sport=36880 dport=80 packets=6 bytes=1031 src=209.85.148.103 dst=xxx.xxx.xxx.21 sport=80 dport=36880 packets=5 bytes=938 [ASSURED] mark=0 secmark=0 use=1
  991. tcp 6 14 TIME_WAIT src=172.16.99.25 dst=209.85.148.104 sport=54406 dport=80 packets=13 bytes=2844 src=209.85.148.104 dst=xxx.xxx.xxx.21 sport=80 dport=54406 packets=16 bytes=16564 [ASSURED] mark=0 secmark=0 use=1
  992. tcp 6 421952 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=32779 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=32779 packets=0 bytes=0 mark=0 secmark=0 use=1
  993. tcp 6 42 CLOSE_WAIT src=172.16.99.9 dst=80.157.150.41 sport=36085 dport=80 packets=9 bytes=613 src=80.157.150.41 dst=xxx.xxx.xxx.21 sport=80 dport=36085 packets=9 bytes=7919 [ASSURED] mark=0 secmark=0 use=1
  994. tcp 6 330452 ESTABLISHED src=172.16.99.4 dst=172.16.0.65 sport=46275 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.4 sport=80 dport=46275 packets=0 bytes=0 mark=0 secmark=0 use=1
  995. tcp 6 156680 ESTABLISHED src=172.16.99.41 dst=172.16.0.65 sport=43986 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.41 sport=80 dport=43986 packets=0 bytes=0 mark=0 secmark=0 use=1
  996. tcp 6 10 TIME_WAIT src=172.16.99.4 dst=141.6.2.171 sport=35202 dport=80 packets=7 bytes=725 src=141.6.2.171 dst=xxx.xxx.xxx.21 sport=80 dport=35202 packets=5 bytes=376 [ASSURED] mark=0 secmark=0 use=1
  997. tcp 6 87 TIME_WAIT src=172.16.99.5 dst=64.78.181.5 sport=38034 dport=80 packets=14 bytes=2005 src=64.78.181.5 dst=xxx.xxx.xxx.21 sport=80 dport=38034 packets=12 bytes=8379 [ASSURED] mark=0 secmark=0 use=1
  998. udp 17 18 src=172.16.44.14 dst=172.16.99.43 sport=1900 dport=61018 packets=6 bytes=2850 [UNREPLIED] src=172.16.99.43 dst=172.16.44.14 sport=61018 dport=1900 packets=0 bytes=0 mark=0 secmark=0 use=1
  999. tcp 6 431990 ESTABLISHED src=172.16.22.72 dst=172.16.22.247 sport=1037 dport=1720 packets=509 bytes=27044 src=172.16.22.247 dst=172.16.22.72 sport=1720 dport=1037 packets=508 bytes=21061 [ASSURED] mark=0 secmark=0 use=1
  1000. tcp 6 328484 ESTABLISHED src=172.16.0.9 dst=10.8.0.198 sport=143 dport=47930 packets=1 bytes=77 [UNREPLIED] src=10.8.0.198 dst=172.16.0.9 sport=47930 dport=143 packets=0 bytes=0 mark=0 secmark=0 use=1
  1001. tcp 6 91 TIME_WAIT src=172.16.0.5 dst=208.50.223.240 sport=40543 dport=80 packets=6 bytes=1088 src=208.50.223.240 dst=xxx.xxx.xxx.21 sport=80 dport=40543 packets=6 bytes=531 [ASSURED] mark=0 secmark=0 use=1
  1002. udp 17 1 src=172.16.99.5 dst=172.16.255.255 sport=17500 dport=17500 packets=1 bytes=147 [UNREPLIED] src=172.16.255.255 dst=172.16.99.5 sport=17500 dport=17500 packets=0 bytes=0 mark=0 secmark=0 use=1
  1003. tcp 6 431981 ESTABLISHED src=172.16.99.5 dst=209.85.227.120 sport=36509 dport=80 packets=2 bytes=112 src=209.85.227.120 dst=xxx.xxx.xxx.21 sport=80 dport=36509 packets=1 bytes=60 [ASSURED] mark=0 secmark=0 use=1
  1004. tcp 6 102 TIME_WAIT src=172.16.99.4 dst=195.27.183.136 sport=38078 dport=80 packets=6 bytes=882 src=195.27.183.136 dst=xxx.xxx.xxx.21 sport=80 dport=38078 packets=4 bytes=548 [ASSURED] mark=0 secmark=0 use=1
  1005. tcp 6 431959 ESTABLISHED src=10.8.0.214 dst=172.16.0.5 sport=61521 dport=5222 packets=48 bytes=5287 src=172.16.0.5 dst=10.8.0.214 sport=5222 dport=61521 packets=47 bytes=24150 [ASSURED] mark=0 secmark=0 use=1
  1006. udp 17 20 src=172.16.99.24 dst=224.0.0.252 sport=56357 dport=5355 packets=1 bytes=52 [UNREPLIED] src=224.0.0.252 dst=172.16.99.24 sport=5355 dport=56357 packets=0 bytes=0 mark=0 secmark=0 use=1
  1007. tcp 6 89 TIME_WAIT src=172.16.99.4 dst=141.6.2.171 sport=35315 dport=80 packets=7 bytes=761 src=141.6.2.171 dst=xxx.xxx.xxx.21 sport=80 dport=35315 packets=5 bytes=376 [ASSURED] mark=0 secmark=0 use=1
  1008. tcp 6 12 TIME_WAIT src=172.16.33.4 dst=199.16.83.72 sport=54058 dport=80 packets=6 bytes=787 src=199.16.83.72 dst=xxx.xxx.xxx.21 sport=80 dport=54058 packets=7 bytes=2217 [ASSURED] mark=0 secmark=0 use=1
  1009. tcp 6 346107 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=40362 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=40362 packets=0 bytes=0 mark=0 secmark=0 use=1
  1010. tcp 6 6 TIME_WAIT src=172.16.33.4 dst=81.22.35.130 sport=53904 dport=80 packets=7 bytes=1145 src=81.22.35.130 dst=xxx.xxx.xxx.21 sport=80 dport=53904 packets=5 bytes=1968 [ASSURED] mark=0 secmark=0 use=1
  1011. tcp 6 431981 ESTABLISHED src=172.16.99.5 dst=209.85.148.104 sport=54282 dport=80 packets=2 bytes=112 src=209.85.148.104 dst=xxx.xxx.xxx.21 sport=80 dport=54282 packets=1 bytes=60 [ASSURED] mark=0 secmark=0 use=1
  1012. tcp 6 2 TIME_WAIT src=172.16.33.4 dst=217.72.204.116 sport=53928 dport=80 packets=5 bytes=1010 src=217.72.204.116 dst=xxx.xxx.xxx.21 sport=80 dport=53928 packets=5 bytes=635 [ASSURED] mark=0 secmark=0 use=1
  1013. udp 17 8 src=172.16.98.15 dst=172.16.255.255 sport=17500 dport=17500 packets=1 bytes=147 [UNREPLIED] src=172.16.255.255 dst=172.16.98.15 sport=17500 dport=17500 packets=0 bytes=0 mark=0 secmark=0 use=1
  1014. tcp 6 431997 ESTABLISHED src=172.16.99.5 dst=74.125.79.101 sport=34374 dport=80 packets=8 bytes=2138 src=74.125.79.101 dst=xxx.xxx.xxx.21 sport=80 dport=34374 packets=6 bytes=784 [ASSURED] mark=0 secmark=0 use=1
  1015. udp 17 26 src=172.16.254.12 dst=172.16.0.5 sport=60935 dport=53 packets=1 bytes=66 src=172.16.0.5 dst=172.16.254.12 sport=53 dport=60935 packets=1 bytes=116 mark=0 secmark=0 use=1
  1016. tcp 6 425439 ESTABLISHED src=172.16.0.11 dst=172.16.99.2 sport=2049 dport=688 packets=42 bytes=5880 src=172.16.99.2 dst=172.16.0.11 sport=688 dport=2049 packets=2 bytes=216 [ASSURED] mark=0 secmark=0 use=1
  1017. tcp 6 330037 ESTABLISHED src=172.16.99.41 dst=172.16.0.65 sport=59752 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.41 sport=80 dport=59752 packets=0 bytes=0 mark=0 secmark=0 use=1
  1018. tcp 6 14 TIME_WAIT src=172.16.99.25 dst=66.102.13.132 sport=54412 dport=80 packets=12 bytes=1455 src=66.102.13.132 dst=xxx.xxx.xxx.21 sport=80 dport=54412 packets=16 bytes=15612 [ASSURED] mark=0 secmark=0 use=1
  1019. tcp 6 250963 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=52497 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=52497 packets=0 bytes=0 mark=0 secmark=0 use=1
  1020. tcp 6 428969 ESTABLISHED src=172.16.99.41 dst=172.16.0.65 sport=44293 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.41 sport=80 dport=44293 packets=0 bytes=0 mark=0 secmark=0 use=1
  1021. udp 17 20 src=172.16.99.24 dst=224.0.0.252 sport=52317 dport=5355 packets=1 bytes=52 [UNREPLIED] src=224.0.0.252 dst=172.16.99.24 sport=5355 dport=52317 packets=0 bytes=0 mark=0 secmark=0 use=1
  1022. udp 17 29 src=xxx.xxx.xxx.18 dst=87.106.252.163 sport=51499 dport=53 packets=1 bytes=73 src=87.106.252.163 dst=xxx.xxx.xxx.18 sport=53 dport=51499 packets=1 bytes=73 mark=0 secmark=0 use=1
  1023. tcp 6 7 TIME_WAIT src=172.16.33.4 dst=213.165.66.209 sport=53878 dport=80 packets=61 bytes=9391 src=213.165.66.209 dst=xxx.xxx.xxx.21 sport=80 dport=53878 packets=84 bytes=108694 [ASSURED] mark=0 secmark=0 use=1
  1024. udp 17 3540 src=172.16.22.75 dst=172.16.22.247 sport=5060 dport=5060 packets=29328 bytes=16018760 src=172.16.22.247 dst=172.16.22.75 sport=5060 dport=5060 packets=43961 bytes=20332646 [ASSURED] mark=0 secmark=0 use=1
  1025. tcp 6 418103 ESTABLISHED src=172.16.99.4 dst=172.16.0.65 sport=34068 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.4 sport=80 dport=34068 packets=0 bytes=0 mark=0 secmark=0 use=1
  1026. tcp 6 428853 ESTABLISHED src=172.16.99.3 dst=172.16.0.65 sport=59007 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.3 sport=80 dport=59007 packets=0 bytes=0 mark=0 secmark=0 use=1
  1027. tcp 6 250738 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=46766 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=46766 packets=0 bytes=0 mark=0 secmark=0 use=1
  1028. tcp 6 431974 ESTABLISHED src=172.16.0.75 dst=172.16.0.70 sport=61511 dport=1031 packets=113 bytes=29252 src=172.16.0.70 dst=172.16.0.75 sport=1031 dport=61511 packets=112 bytes=92404 [ASSURED] mark=0 secmark=0 use=1
  1029. tcp 6 330298 ESTABLISHED src=172.16.99.4 dst=172.16.0.65 sport=46269 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.4 sport=80 dport=46269 packets=0 bytes=0 mark=0 secmark=0 use=1
  1030. tcp 6 10 TIME_WAIT src=172.16.33.4 dst=199.16.83.72 sport=53978 dport=80 packets=6 bytes=785 src=199.16.83.72 dst=xxx.xxx.xxx.21 sport=80 dport=53978 packets=7 bytes=1786 [ASSURED] mark=0 secmark=0 use=1
  1031. tcp 6 431997 ESTABLISHED src=172.16.22.73 dst=172.16.22.247 sport=1402 dport=4060 packets=302246 bytes=16982221 src=172.16.22.247 dst=172.16.22.73 sport=4060 dport=1402 packets=302235 bytes=14258391 [ASSURED] mark=0 secmark=0 use=1
  1032. udp 17 24 src=xxx.xxx.xxx.18 dst=141.1.1.1 sport=57991 dport=53 packets=1 bytes=73 src=141.1.1.1 dst=xxx.xxx.xxx.18 sport=53 dport=57991 packets=1 bytes=223 mark=0 secmark=0 use=1
  1033. udp 17 20 src=172.16.99.4 dst=224.0.0.251 sport=5353 dport=5353 packets=2 bytes=291 [UNREPLIED] src=224.0.0.251 dst=172.16.99.4 sport=5353 dport=5353 packets=0 bytes=0 mark=0 secmark=0 use=1
  1034. tcp 6 18 TIME_WAIT src=192.168.0.5 dst=172.16.0.9 sport=42641 dport=143 packets=11 bytes=674 src=172.16.0.9 dst=192.168.0.5 sport=143 dport=42641 packets=13 bytes=1573 [ASSURED] mark=0 secmark=0 use=1
  1035. udp 17 20 src=172.16.99.24 dst=224.0.0.252 sport=56175 dport=5355 packets=1 bytes=52 [UNREPLIED] src=224.0.0.252 dst=172.16.99.24 sport=5355 dport=56175 packets=0 bytes=0 mark=0 secmark=0 use=1
  1036. tcp 6 431999 ESTABLISHED src=172.16.99.9 dst=178.77.102.213 sport=47326 dport=6668 packets=5 bytes=395 [UNREPLIED] src=178.77.102.213 dst=172.16.99.9 sport=6668 dport=47326 packets=0 bytes=0 mark=0 secmark=0 use=1
  1037. tcp 6 75 TIME_WAIT src=172.16.33.4 dst=63.215.202.48 sport=53835 dport=80 packets=6 bytes=905 src=63.215.202.48 dst=xxx.xxx.xxx.21 sport=80 dport=53835 packets=3 bytes=435 [ASSURED] mark=0 secmark=0 use=1
  1038. tcp 6 7 TIME_WAIT src=172.16.33.4 dst=213.165.66.209 sport=53891 dport=80 packets=12 bytes=2104 src=213.165.66.209 dst=xxx.xxx.xxx.21 sport=80 dport=53891 packets=11 bytes=7611 [ASSURED] mark=0 secmark=0 use=1
  1039. tcp 6 11 TIME_WAIT src=172.16.33.4 dst=199.16.83.72 sport=54032 dport=80 packets=6 bytes=785 src=199.16.83.72 dst=xxx.xxx.xxx.21 sport=80 dport=54032 packets=7 bytes=1786 [ASSURED] mark=0 secmark=0 use=1
  1040. tcp 6 9 TIME_WAIT src=172.16.33.4 dst=199.16.83.72 sport=53950 dport=80 packets=6 bytes=785 src=199.16.83.72 dst=xxx.xxx.xxx.21 sport=80 dport=53950 packets=7 bytes=1786 [ASSURED] mark=0 secmark=0 use=1
  1041. tcp 6 415418 ESTABLISHED src=172.16.98.13 dst=172.16.130.20 sport=16050 dport=57561 packets=1129 bytes=68160 [UNREPLIED] src=172.16.130.20 dst=172.16.98.13 sport=57561 dport=16050 packets=0 bytes=0 mark=0 secmark=0 use=1
  1042. tcp 6 2 TIME_WAIT src=172.16.33.4 dst=217.72.204.230 sport=53920 dport=80 packets=8 bytes=1118 src=217.72.204.230 dst=xxx.xxx.xxx.21 sport=80 dport=53920 packets=10 bytes=5468 [ASSURED] mark=0 secmark=0 use=1
  1043. udp 17 20 src=172.16.99.24 dst=224.0.0.252 sport=53068 dport=5355 packets=1 bytes=52 [UNREPLIED] src=224.0.0.252 dst=172.16.99.24 sport=5355 dport=53068 packets=0 bytes=0 mark=0 secmark=0 use=1
  1044. tcp 6 417740 ESTABLISHED src=172.16.0.9 dst=10.8.0.198 sport=143 dport=40320 packets=1 bytes=77 [UNREPLIED] src=10.8.0.198 dst=172.16.0.9 sport=40320 dport=143 packets=0 bytes=0 mark=0 secmark=0 use=1
  1045. tcp 6 349088 ESTABLISHED src=172.16.99.25 dst=172.16.0.65 sport=51575 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.99.25 sport=80 dport=51575 packets=0 bytes=0 mark=0 secmark=0 use=1
  1046. tcp 6 59483 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=57990 dport=80 packets=292 bytes=19024 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=57990 packets=0 bytes=0 mark=0 secmark=0 use=1
  1047. udp 17 21 src=172.16.33.4 dst=255.255.255.255 sport=64410 dport=1211 packets=1070 bytes=127330 [UNREPLIED] src=255.255.255.255 dst=172.16.33.4 sport=1211 dport=64410 packets=0 bytes=0 mark=0 secmark=0 use=1
  1048. tcp 6 431997 ESTABLISHED src=172.16.0.33 dst=212.185.xx.18 sport=1202 dport=443 packets=2 bytes=147 src=212.185.xx.18 dst=xxx.xxx.xxx.18 sport=443 dport=1202 packets=1 bytes=107 [ASSURED] mark=0 secmark=0 use=1
  1049. udp 17 29 src=172.16.125.111 dst=239.255.47.11 sport=1057 dport=4711 packets=6 bytes=1452 [UNREPLIED] src=239.255.47.11 dst=172.16.125.111 sport=4711 dport=1057 packets=0 bytes=0 mark=0 secmark=0 use=1
  1050. tcp 6 412772 ESTABLISHED src=172.16.98.13 dst=172.16.130.20 sport=16050 dport=56872 packets=913 bytes=53592 [UNREPLIED] src=172.16.130.20 dst=172.16.98.13 sport=56872 dport=16050 packets=0 bytes=0 mark=0 secmark=0 use=1
  1051. tcp 6 428427 ESTABLISHED src=172.16.99.9 dst=172.16.0.65 sport=42527 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.9 sport=80 dport=42527 packets=0 bytes=0 mark=0 secmark=0 use=1
  1052. tcp 6 256403 ESTABLISHED src=172.16.33.4 dst=172.16.0.65 sport=58843 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.33.4 sport=80 dport=58843 packets=0 bytes=0 mark=0 secmark=0 use=1
  1053. tcp 6 258694 ESTABLISHED src=172.16.99.9 dst=172.16.0.65 sport=48013 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.9 sport=80 dport=48013 packets=0 bytes=0 mark=0 secmark=0 use=1
  1054. udp 17 17 src=172.16.98.13 dst=172.16.0.5 sport=60379 dport=53 packets=1 bytes=80 src=172.16.0.5 dst=172.16.98.13 sport=53 dport=60379 packets=1 bytes=172 mark=0 secmark=0 use=1
  1055. tcp 6 431998 ESTABLISHED src=172.16.99.5 dst=74.125.39.165 sport=34654 dport=80 packets=12 bytes=4139 src=74.125.39.165 dst=xxx.xxx.xxx.21 sport=80 dport=34654 packets=8 bytes=963 [ASSURED] mark=0 secmark=0 use=1
  1056. tcp 6 156680 ESTABLISHED src=172.16.99.41 dst=172.16.0.65 sport=43985 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.41 sport=80 dport=43985 packets=0 bytes=0 mark=0 secmark=0 use=1
  1057. tcp 6 101 TIME_WAIT src=172.16.99.35 dst=193.99.144.85 sport=45017 dport=80 packets=8 bytes=863 src=193.99.144.85 dst=xxx.xxx.xxx.21 sport=80 dport=45017 packets=8 bytes=4993 [ASSURED] mark=0 secmark=0 use=1
  1058. tcp 6 418103 ESTABLISHED src=172.16.99.4 dst=172.16.0.65 sport=34061 dport=80 packets=24 bytes=19971 [UNREPLIED] src=172.16.0.65 dst=172.16.99.4 sport=80 dport=34061 packets=0 bytes=0 mark=0 secmark=0 use=1
  1059. tcp 6 232330 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=64175 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=64175 packets=0 bytes=0 mark=0 secmark=0 use=1
  1060. tcp 6 330473 ESTABLISHED src=172.16.99.41 dst=172.16.0.65 sport=56414 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.41 sport=80 dport=56414 packets=0 bytes=0 mark=0 secmark=0 use=1
  1061. tcp 6 337610 ESTABLISHED src=172.16.99.22 dst=172.16.0.65 sport=57512 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.22 sport=80 dport=57512 packets=0 bytes=0 mark=0 secmark=0 use=1
  1062. tcp 6 431998 ESTABLISHED src=172.16.99.5 dst=209.85.148.155 sport=37087 dport=443 packets=1 bytes=52 src=209.85.148.155 dst=xxx.xxx.xxx.18 sport=443 dport=37087 packets=1 bytes=52 mark=0 secmark=0 use=1
  1063. tcp 6 405085 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=57471 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=57471 packets=0 bytes=0 mark=0 secmark=0 use=1
  1064. tcp 6 337610 ESTABLISHED src=172.16.99.22 dst=172.16.0.65 sport=57508 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.22 sport=80 dport=57508 packets=0 bytes=0 mark=0 secmark=0 use=1
  1065. tcp 6 59483 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=58014 dport=80 packets=5 bytes=581 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=58014 packets=0 bytes=0 mark=0 secmark=0 use=1
  1066. tcp 6 156680 ESTABLISHED src=172.16.99.41 dst=172.16.0.65 sport=43987 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.41 sport=80 dport=43987 packets=0 bytes=0 mark=0 secmark=0 use=1
  1067. tcp 6 412494 ESTABLISHED src=172.16.98.13 dst=172.16.130.20 sport=16050 dport=56775 packets=1409 bytes=91520 [UNREPLIED] src=172.16.130.20 dst=172.16.98.13 sport=56775 dport=16050 packets=0 bytes=0 mark=0 secmark=0 use=1
  1068. tcp 6 59573 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=58003 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=58003 packets=0 bytes=0 mark=0 secmark=0 use=1
  1069. tcp 6 2 TIME_WAIT src=172.16.33.4 dst=217.72.196.218 sport=53924 dport=80 packets=5 bytes=555 src=217.72.196.218 dst=xxx.xxx.xxx.21 sport=80 dport=53924 packets=7 bytes=3789 [ASSURED] mark=0 secmark=0 use=1
  1070. udp 17 3 src=172.16.99.3 dst=172.16.255.255 sport=17500 dport=17500 packets=1 bytes=137 [UNREPLIED] src=172.16.255.255 dst=172.16.99.3 sport=17500 dport=17500 packets=0 bytes=0 mark=0 secmark=0 use=1
  1071. tcp 6 87 TIME_WAIT src=172.16.99.5 dst=209.85.227.120 sport=36474 dport=80 packets=5 bytes=268 src=209.85.227.120 dst=xxx.xxx.xxx.21 sport=80 dport=36474 packets=3 bytes=164 [ASSURED] mark=0 secmark=0 use=1
  1072. tcp 6 86 TIME_WAIT src=172.16.0.5 dst=208.50.223.240 sport=55389 dport=80 packets=7 bytes=1110 src=208.50.223.240 dst=xxx.xxx.xxx.21 sport=80 dport=55389 packets=5 bytes=1536 [ASSURED] mark=0 secmark=0 use=1
  1073. tcp 6 7 TIME_WAIT src=172.16.33.4 dst=213.165.66.209 sport=53881 dport=80 packets=13 bytes=2118 src=213.165.66.209 dst=xxx.xxx.xxx.21 sport=80 dport=53881 packets=10 bytes=5743 [ASSURED] mark=0 secmark=0 use=1
  1074. tcp 6 87 TIME_WAIT src=172.16.99.5 dst=209.85.148.147 sport=34990 dport=80 packets=5 bytes=268 src=209.85.148.147 dst=xxx.xxx.xxx.21 sport=80 dport=34990 packets=3 bytes=164 [ASSURED] mark=0 secmark=0 use=1
  1075. tcp 6 2 TIME_WAIT src=172.16.33.4 dst=217.72.202.242 sport=53931 dport=80 packets=5 bytes=638 src=217.72.202.242 dst=xxx.xxx.xxx.21 sport=80 dport=53931 packets=5 bytes=562 [ASSURED] mark=0 secmark=0 use=1
  1076. tcp 6 431863 ESTABLISHED src=172.16.99.4 dst=195.27.183.168 sport=49797 dport=80 packets=8 bytes=561 src=195.27.183.168 dst=xxx.xxx.xxx.21 sport=80 dport=49797 packets=8 bytes=7867 [ASSURED] mark=0 secmark=0 use=1
  1077. tcp 6 431672 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=50816 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=50816 packets=0 bytes=0 mark=0 secmark=0 use=1
  1078. tcp 6 431999 ESTABLISHED src=172.16.0.5 dst=65.55.122.232 sport=51623 dport=443 packets=1 bytes=59 [UNREPLIED] src=65.55.122.232 dst=xxx.xxx.xxx.18 sport=443 dport=51623 packets=0 bytes=0 mark=0 secmark=0 use=1
  1079. udp 17 170 src=10.8.0.238 dst=172.16.0.9 sport=137 dport=137 packets=69 bytes=5490 src=172.16.0.9 dst=10.8.0.238 sport=137 dport=137 packets=69 bytes=5832 [ASSURED] mark=0 secmark=0 use=1
  1080. tcp 6 430402 ESTABLISHED src=172.16.98.15 dst=172.16.119.24 sport=45711 dport=1521 packets=72 bytes=4518 [UNREPLIED] src=172.16.119.24 dst=172.16.98.15 sport=1521 dport=45711 packets=0 bytes=0 mark=0 secmark=0 use=1
  1081. tcp 6 431995 ESTABLISHED src=172.16.0.27 dst=193.73.208.20 sport=1837 dport=10000 packets=2 bytes=408 [UNREPLIED] src=193.73.208.20 dst=172.16.0.27 sport=10000 dport=1837 packets=0 bytes=0 mark=0 secmark=0 use=1
  1082. tcp 6 431737 ESTABLISHED src=10.8.0.214 dst=172.16.0.9 sport=61563 dport=143 packets=36 bytes=3830 src=172.16.0.9 dst=10.8.0.214 sport=143 dport=61563 packets=26 bytes=5591 [ASSURED] mark=0 secmark=0 use=1
  1083. tcp 6 431982 ESTABLISHED src=172.16.33.4 dst=65.55.122.234 sport=50881 dport=80 packets=360 bytes=14761 src=65.55.122.234 dst=xxx.xxx.xxx.21 sport=80 dport=50881 packets=359 bytes=17392 [ASSURED] mark=0 secmark=0 use=1
  1084. tcp 6 44 TIME_WAIT src=172.16.98.15 dst=172.16.0.5 sport=46463 dport=80 packets=144 bytes=10540 src=172.16.0.5 dst=172.16.98.15 sport=80 dport=46463 packets=196 bytes=262499 [ASSURED] mark=0 secmark=0 use=1
  1085. tcp 6 412503 ESTABLISHED src=172.16.98.13 dst=172.16.130.20 sport=16050 dport=56779 packets=1380 bytes=89456 [UNREPLIED] src=172.16.130.20 dst=172.16.98.13 sport=56779 dport=16050 packets=0 bytes=0 mark=0 secmark=0 use=1
  1086. tcp 6 414179 ESTABLISHED src=172.16.98.13 dst=172.16.130.20 sport=16050 dport=57220 packets=151 bytes=12300 [UNREPLIED] src=172.16.130.20 dst=172.16.98.13 sport=57220 dport=16050 packets=0 bytes=0 mark=0 secmark=0 use=1
  1087. udp 17 29 src=xxx.xxx.xxx.18 dst=141.1.1.1 sport=37798 dport=53 packets=1 bytes=73 src=141.1.1.1 dst=xxx.xxx.xxx.18 sport=53 dport=37798 packets=1 bytes=263 mark=0 secmark=0 use=1
  1088. tcp 6 145930 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=53422 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=53422 packets=0 bytes=0 mark=0 secmark=0 use=1
  1089. tcp 6 145952 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=53440 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=53440 packets=0 bytes=0 mark=0 secmark=0 use=1
  1090. tcp 6 383422 ESTABLISHED src=172.16.0.7 dst=172.16.0.75 sport=36564 dport=389 packets=6 bytes=2340 [UNREPLIED] src=172.16.0.75 dst=172.16.0.7 sport=389 dport=36564 packets=0 bytes=0 mark=0 secmark=0 use=1
  1091. tcp 6 52 TIME_WAIT src=172.16.33.4 dst=188.72.250.210 sport=54181 dport=80 packets=6 bytes=2850 src=188.72.250.210 dst=xxx.xxx.xxx.21 sport=80 dport=54181 packets=6 bytes=718 [ASSURED] mark=0 secmark=0 use=1
  1092. tcp 6 159045 ESTABLISHED src=172.16.33.4 dst=172.16.0.65 sport=53054 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.33.4 sport=80 dport=53054 packets=0 bytes=0 mark=0 secmark=0 use=1
  1093. udp 17 13 src=172.16.0.62 dst=172.16.0.75 sport=60023 dport=389 packets=1 bytes=246 src=172.16.0.75 dst=172.16.0.62 sport=389 dport=60023 packets=1 bytes=210 mark=0 secmark=0 use=1
  1094. tcp 6 405231 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=57545 dport=7635 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=7635 dport=57545 packets=0 bytes=0 mark=0 secmark=0 use=1
  1095. tcp 6 427242 ESTABLISHED src=172.16.98.15 dst=172.16.119.24 sport=45712 dport=1521 packets=81 bytes=4212 [UNREPLIED] src=172.16.119.24 dst=172.16.98.15 sport=1521 dport=45712 packets=0 bytes=0 mark=0 secmark=0 use=1
  1096. udp 17 13 src=172.16.99.4 dst=255.255.255.255 sport=17500 dport=17500 packets=1 bytes=147 [UNREPLIED] src=255.255.255.255 dst=172.16.99.4 sport=17500 dport=17500 packets=0 bytes=0 mark=0 secmark=0 use=1
  1097. tcp 6 287590 ESTABLISHED src=172.16.0.9 dst=10.8.0.18 sport=143 dport=50641 packets=1 bytes=65 [UNREPLIED] src=10.8.0.18 dst=172.16.0.9 sport=50641 dport=143 packets=0 bytes=0 mark=0 secmark=0 use=1
  1098. tcp 6 102 TIME_WAIT src=172.16.99.4 dst=209.85.148.99 sport=39964 dport=80 packets=13 bytes=1223 src=209.85.148.99 dst=xxx.xxx.xxx.21 sport=80 dport=39964 packets=11 bytes=9403 [ASSURED] mark=0 secmark=0 use=1
  1099. tcp 6 2 TIME_WAIT src=172.16.33.4 dst=217.72.204.100 sport=53932 dport=80 packets=5 bytes=918 src=217.72.204.100 dst=xxx.xxx.xxx.21 sport=80 dport=53932 packets=5 bytes=804 [ASSURED] mark=0 secmark=0 use=1
  1100. tcp 6 86 TIME_WAIT src=172.16.0.5 dst=208.50.223.240 sport=44247 dport=80 packets=9 bytes=1227 src=208.50.223.240 dst=xxx.xxx.xxx.21 sport=80 dport=44247 packets=8 bytes=5151 [ASSURED] mark=0 secmark=0 use=1
  1101. tcp 6 2 TIME_WAIT src=172.16.33.4 dst=217.79.188.9 sport=53926 dport=80 packets=5 bytes=1347 src=217.79.188.9 dst=xxx.xxx.xxx.21 sport=80 dport=53926 packets=4 bytes=791 [ASSURED] mark=0 secmark=0 use=1
  1102. tcp 6 119 SYN_SENT src=172.16.254.10 dst=192.168.1.181 sport=830 dport=111 packets=2 bytes=128 [UNREPLIED] src=192.168.1.181 dst=172.16.254.10 sport=111 dport=830 packets=0 bytes=0 mark=0 secmark=0 use=1
  1103. tcp 6 431981 ESTABLISHED src=172.16.99.5 dst=209.85.148.104 sport=54283 dport=80 packets=2 bytes=112 src=209.85.148.104 dst=xxx.xxx.xxx.21 sport=80 dport=54283 packets=1 bytes=60 [ASSURED] mark=0 secmark=0 use=1
  1104. tcp 6 1 TIME_WAIT src=172.16.33.4 dst=217.72.204.209 sport=53912 dport=80 packets=6 bytes=957 src=217.72.204.209 dst=xxx.xxx.xxx.21 sport=80 dport=53912 packets=7 bytes=3886 [ASSURED] mark=0 secmark=0 use=1
  1105. tcp 6 87 TIME_WAIT src=172.16.99.5 dst=209.85.227.120 sport=36473 dport=80 packets=5 bytes=268 src=209.85.227.120 dst=xxx.xxx.xxx.21 sport=80 dport=36473 packets=3 bytes=164 [ASSURED] mark=0 secmark=0 use=1
  1106. tcp 6 156680 ESTABLISHED src=172.16.99.41 dst=172.16.0.65 sport=43988 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.41 sport=80 dport=43988 packets=0 bytes=0 mark=0 secmark=0 use=1
  1107. tcp 6 8 TIME_WAIT src=172.16.33.4 dst=199.16.83.72 sport=53942 dport=80 packets=6 bytes=785 src=199.16.83.72 dst=xxx.xxx.xxx.21 sport=80 dport=53942 packets=7 bytes=2100 [ASSURED] mark=0 secmark=0 use=1
  1108. tcp 6 53 TIME_WAIT src=172.16.44.14 dst=141.6.2.171 sport=55828 dport=80 packets=6 bytes=811 src=141.6.2.171 dst=xxx.xxx.xxx.21 sport=80 dport=55828 packets=5 bytes=316 [ASSURED] mark=0 secmark=0 use=1
  1109. tcp 6 427649 ESTABLISHED src=172.16.98.15 dst=172.16.119.24 sport=45710 dport=1521 packets=45 bytes=2340 [UNREPLIED] src=172.16.119.24 dst=172.16.98.15 sport=1521 dport=45710 packets=0 bytes=0 mark=0 secmark=0 use=1
  1110. tcp 6 25 TIME_WAIT src=172.16.99.43 dst=80.67.16.108 sport=50605 dport=80 packets=6 bytes=585 src=80.67.16.108 dst=xxx.xxx.xxx.21 sport=80 dport=50605 packets=5 bytes=714 [ASSURED] mark=0 secmark=0 use=1
  1111. tcp 6 59472 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=58009 dport=80 packets=6 bytes=951 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=58009 packets=0 bytes=0 mark=0 secmark=0 use=1
  1112. udp 17 2 src=172.16.0.11 dst=172.16.0.162 sport=50203 dport=161 packets=1 bytes=106 src=172.16.0.162 dst=172.16.0.11 sport=161 dport=50203 packets=1 bytes=124 mark=0 secmark=0 use=1
  1113. tcp 6 53 TIME_WAIT src=172.16.99.4 dst=141.6.2.171 sport=35217 dport=80 packets=7 bytes=802 src=141.6.2.171 dst=xxx.xxx.xxx.21 sport=80 dport=35217 packets=5 bytes=376 [ASSURED] mark=0 secmark=0 use=1
  1114. tcp 6 405085 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=57472 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=57472 packets=0 bytes=0 mark=0 secmark=0 use=1
  1115. tcp 6 427446 ESTABLISHED src=172.16.99.3 dst=172.16.230.10 sport=42925 dport=22 packets=17 bytes=884 [UNREPLIED] src=172.16.230.10 dst=172.16.99.3 sport=22 dport=42925 packets=0 bytes=0 mark=0 secmark=0 use=1
  1116. tcp 6 256402 ESTABLISHED src=172.16.33.4 dst=172.16.0.65 sport=58836 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.33.4 sport=80 dport=58836 packets=0 bytes=0 mark=0 secmark=0 use=1
  1117. tcp 6 431998 ESTABLISHED src=172.16.99.5 dst=209.85.148.103 sport=36881 dport=80 packets=8 bytes=1846 src=209.85.148.103 dst=xxx.xxx.xxx.21 sport=80 dport=36881 packets=6 bytes=1660 [ASSURED] mark=0 secmark=0 use=1
  1118. tcp 6 19 TIME_WAIT src=172.16.0.5 dst=208.50.223.240 sport=53157 dport=80 packets=6 bytes=1087 src=208.50.223.240 dst=xxx.xxx.xxx.21 sport=80 dport=53157 packets=6 bytes=531 [ASSURED] mark=0 secmark=0 use=1
  1119. tcp 6 55 TIME_WAIT src=172.16.33.4 dst=87.248.217.254 sport=54179 dport=80 packets=26 bytes=3204 src=87.248.217.254 dst=xxx.xxx.xxx.21 sport=80 dport=54179 packets=47 bytes=61050 [ASSURED] mark=0 secmark=0 use=1
  1120. tcp 6 266096 ESTABLISHED src=172.16.99.9 dst=172.16.200.41 sport=52512 dport=22 packets=1 bytes=100 [UNREPLIED] src=172.16.200.41 dst=172.16.99.9 sport=22 dport=52512 packets=0 bytes=0 mark=0 secmark=0 use=1
  1121. tcp 6 405231 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=57543 dport=7635 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=7635 dport=57543 packets=0 bytes=0 mark=0 secmark=0 use=1
  1122. tcp 6 53 TIME_WAIT src=172.16.99.9 dst=91.199.98.86 sport=55539 dport=80 packets=10 bytes=1080 src=91.199.98.86 dst=xxx.xxx.xxx.21 sport=80 dport=55539 packets=9 bytes=7119 [ASSURED] mark=0 secmark=0 use=1
  1123. tcp 6 2 TIME_WAIT src=172.16.33.4 dst=217.72.204.89 sport=53919 dport=80 packets=6 bytes=958 src=217.72.204.89 dst=xxx.xxx.xxx.21 sport=80 dport=53919 packets=5 bytes=382 [ASSURED] mark=0 secmark=0 use=1
  1124. tcp 6 249538 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=47445 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=47445 packets=0 bytes=0 mark=0 secmark=0 use=1
  1125. tcp 6 431980 ESTABLISHED src=172.16.99.4 dst=74.125.79.100 sport=34565 dport=80 packets=6 bytes=1237 src=74.125.79.100 dst=xxx.xxx.xxx.21 sport=80 dport=34565 packets=5 bytes=1131 [ASSURED] mark=0 secmark=0 use=1
  1126. tcp 6 431997 ESTABLISHED src=172.16.99.5 dst=74.125.79.101 sport=34375 dport=80 packets=6 bytes=1125 src=74.125.79.101 dst=xxx.xxx.xxx.21 sport=80 dport=34375 packets=5 bytes=598 [ASSURED] mark=0 secmark=0 use=1
  1127. tcp 6 330230 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=47213 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=47213 packets=0 bytes=0 mark=0 secmark=0 use=1
  1128. tcp 6 337610 ESTABLISHED src=172.16.99.22 dst=172.16.0.65 sport=57511 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.22 sport=80 dport=57511 packets=0 bytes=0 mark=0 secmark=0 use=1
  1129. tcp 6 14 TIME_WAIT src=172.16.99.25 dst=209.85.148.104 sport=54409 dport=80 packets=7 bytes=1454 src=209.85.148.104 dst=xxx.xxx.xxx.21 sport=80 dport=54409 packets=5 bytes=1816 [ASSURED] mark=0 secmark=0 use=1
  1130. tcp 6 349088 ESTABLISHED src=172.16.99.25 dst=172.16.0.65 sport=51573 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.99.25 sport=80 dport=51573 packets=0 bytes=0 mark=0 secmark=0 use=1
  1131. tcp 6 59483 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=57993 dport=80 packets=135 bytes=12404 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=57993 packets=0 bytes=0 mark=0 secmark=0 use=1
  1132. tcp 6 349088 ESTABLISHED src=172.16.99.25 dst=172.16.0.65 sport=51571 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.99.25 sport=80 dport=51571 packets=0 bytes=0 mark=0 secmark=0 use=1
  1133. tcp 6 87 TIME_WAIT src=172.16.99.5 dst=64.78.181.5 sport=38037 dport=80 packets=10 bytes=1854 src=64.78.181.5 dst=xxx.xxx.xxx.21 sport=80 dport=38037 packets=8 bytes=1710 [ASSURED] mark=0 secmark=0 use=1
  1134. tcp 6 431953 ESTABLISHED src=172.16.99.3 dst=199.47.217.148 sport=45331 dport=80 packets=1396 bytes=334484 src=199.47.217.148 dst=xxx.xxx.xxx.21 sport=80 dport=45331 packets=2786 bytes=394048 [ASSURED] mark=0 secmark=0 use=1
  1135. tcp 6 332155 ESTABLISHED src=172.16.99.4 dst=172.16.0.65 sport=60838 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.4 sport=80 dport=60838 packets=0 bytes=0 mark=0 secmark=0 use=1
  1136. tcp 6 1 TIME_WAIT src=172.16.33.4 dst=217.72.204.116 sport=53906 dport=80 packets=7 bytes=1196 src=217.72.204.116 dst=xxx.xxx.xxx.21 sport=80 dport=53906 packets=10 bytes=9806 [ASSURED] mark=0 secmark=0 use=1
  1137. udp 17 16 src=172.16.99.43 dst=239.255.255.250 sport=61018 dport=1900 packets=6 bytes=912 [UNREPLIED] src=239.255.255.250 dst=172.16.99.43 sport=1900 dport=61018 packets=0 bytes=0 mark=0 secmark=0 use=1
  1138. tcp 6 59519 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=57982 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=57982 packets=0 bytes=0 mark=0 secmark=0 use=1
  1139. tcp 6 431987 ESTABLISHED src=172.16.99.4 dst=141.6.2.171 sport=54797 dport=80 packets=24 bytes=4579 src=141.6.2.171 dst=xxx.xxx.xxx.21 sport=80 dport=1242 packets=21 bytes=12293 [ASSURED] mark=0 secmark=0 use=1
  1140. tcp 6 428970 ESTABLISHED src=172.16.99.41 dst=172.16.0.65 sport=44295 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.41 sport=80 dport=44295 packets=0 bytes=0 mark=0 secmark=0 use=1
  1141. tcp 6 185243 ESTABLISHED src=172.16.0.70 dst=172.16.0.76 sport=445 dport=57980 packets=5 bytes=1050 [UNREPLIED] src=172.16.0.76 dst=172.16.0.70 sport=57980 dport=445 packets=0 bytes=0 mark=0 secmark=0 use=1
  1142. tcp 6 330253 ESTABLISHED src=172.16.99.4 dst=172.16.0.65 sport=46268 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.4 sport=80 dport=46268 packets=0 bytes=0 mark=0 secmark=0 use=1
  1143. tcp 6 104 TIME_WAIT src=172.16.98.15 dst=172.16.0.5 sport=40592 dport=80 packets=61 bytes=4627 src=172.16.0.5 dst=172.16.98.15 sport=80 dport=40592 packets=75 bytes=95848 [ASSURED] mark=0 secmark=0 use=1
  1144. tcp 6 13 TIME_WAIT src=172.16.33.4 dst=217.72.200.153 sport=53962 dport=80 packets=15 bytes=1211 src=217.72.200.153 dst=xxx.xxx.xxx.21 sport=80 dport=53962 packets=25 bytes=31249 [ASSURED] mark=0 secmark=0 use=1
  1145. udp 17 23 src=xxx.xxx.xxx.18 dst=87.106.252.163 sport=60639 dport=53 packets=1 bytes=73 src=87.106.252.163 dst=xxx.xxx.xxx.18 sport=53 dport=60639 packets=1 bytes=73 mark=0 secmark=0 use=1
  1146. tcp 6 345870 ESTABLISHED src=172.16.99.4 dst=172.16.0.65 sport=59647 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.4 sport=80 dport=59647 packets=0 bytes=0 mark=0 secmark=0 use=1
  1147. udp 17 20 src=172.16.99.24 dst=224.0.0.252 sport=65180 dport=5355 packets=1 bytes=52 [UNREPLIED] src=224.0.0.252 dst=172.16.99.24 sport=5355 dport=65180 packets=0 bytes=0 mark=0 secmark=0 use=1
  1148. tcp 6 431981 ESTABLISHED src=172.16.99.5 dst=209.85.148.104 sport=54284 dport=80 packets=2 bytes=112 src=209.85.148.104 dst=xxx.xxx.xxx.21 sport=80 dport=54284 packets=1 bytes=60 [ASSURED] mark=0 secmark=0 use=1
  1149. tcp 6 414758 ESTABLISHED src=172.16.98.13 dst=172.16.130.20 sport=16050 dport=57373 packets=343 bytes=29023 [UNREPLIED] src=172.16.130.20 dst=172.16.98.13 sport=57373 dport=16050 packets=0 bytes=0 mark=0 secmark=0 use=1
  1150. tcp 6 87 TIME_WAIT src=172.16.99.5 dst=209.85.148.147 sport=34988 dport=80 packets=5 bytes=268 src=209.85.148.147 dst=xxx.xxx.xxx.21 sport=80 dport=34988 packets=3 bytes=164 [ASSURED] mark=0 secmark=0 use=1
  1151. tcp 6 429575 ESTABLISHED src=172.16.0.5 dst=172.16.0.65 sport=60897 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.0.5 sport=80 dport=60897 packets=0 bytes=0 mark=0 secmark=0 use=1
  1152. tcp 6 2 TIME_WAIT src=172.16.0.5 dst=208.50.223.240 sport=48049 dport=80 packets=6 bytes=1206 src=208.50.223.240 dst=xxx.xxx.xxx.21 sport=80 dport=48049 packets=6 bytes=559 [ASSURED] mark=0 secmark=0 use=1
  1153. tcp 6 431737 ESTABLISHED src=10.8.0.214 dst=172.16.0.9 sport=61565 dport=143 packets=29 bytes=1766 src=172.16.0.9 dst=10.8.0.214 sport=143 dport=61565 packets=21 bytes=4172 [ASSURED] mark=0 secmark=0 use=1
  1154. tcp 6 299 ESTABLISHED src=172.16.0.29 dst=193.73.208.20 sport=4405 dport=10000 packets=67 bytes=10676 src=193.73.208.20 dst=xxx.xxx.xxx.18 sport=10000 dport=4405 packets=50 bytes=14904 [ASSURED] mark=0 secmark=0 use=1
  1155. tcp 6 431864 ESTABLISHED src=172.16.99.4 dst=195.27.183.168 sport=49799 dport=80 packets=8 bytes=561 src=195.27.183.168 dst=xxx.xxx.xxx.21 sport=80 dport=49799 packets=8 bytes=7916 [ASSURED] mark=0 secmark=0 use=1
  1156. tcp 6 7 TIME_WAIT src=172.16.33.4 dst=213.165.66.209 sport=53890 dport=80 packets=27 bytes=5172 src=213.165.66.209 dst=xxx.xxx.xxx.21 sport=80 dport=53890 packets=28 bytes=27447 [ASSURED] mark=0 secmark=0 use=1
  1157. tcp 6 214236 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=58585 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=58585 packets=0 bytes=0 mark=0 secmark=0 use=1
  1158. tcp 6 431992 ESTABLISHED src=172.16.22.71 dst=172.16.22.247 sport=1400 dport=4060 packets=301478 bytes=16942650 src=172.16.22.247 dst=172.16.22.71 sport=4060 dport=1400 packets=301478 bytes=14190657 [ASSURED] mark=0 secmark=0 use=1
  1159. tcp 6 431465 ESTABLISHED src=172.16.99.9 dst=172.16.0.2 sport=36895 dport=22 packets=316 bytes=24799 src=172.16.0.2 dst=172.16.99.9 sport=22 dport=36895 packets=219 bytes=46035 [ASSURED] mark=0 secmark=0 use=1
  1160. tcp 6 431976 ESTABLISHED src=172.16.33.4 dst=65.55.122.234 sport=50883 dport=80 packets=372 bytes=18860 src=65.55.122.234 dst=xxx.xxx.xxx.21 sport=80 dport=50883 packets=371 bytes=14852 [ASSURED] mark=0 secmark=0 use=1
  1161. tcp 6 431015 ESTABLISHED src=172.16.99.9 dst=172.16.0.1 sport=37704 dport=22 packets=663 bytes=49355 src=172.16.0.1 dst=172.16.99.9 sport=22 dport=37704 packets=440 bytes=120999 [ASSURED] mark=0 secmark=0 use=1
  1162. tcp 6 360814 ESTABLISHED src=172.16.0.9 dst=10.8.0.214 sport=143 dport=59758 packets=1 bytes=77 [UNREPLIED] src=10.8.0.214 dst=172.16.0.9 sport=59758 dport=143 packets=0 bytes=0 mark=0 secmark=0 use=1
  1163. tcp 6 3 TIME_WAIT src=172.16.33.4 dst=217.72.204.230 sport=53917 dport=80 packets=21 bytes=2108 src=217.72.204.230 dst=xxx.xxx.xxx.21 sport=80 dport=53917 packets=33 bytes=38151 [ASSURED] mark=0 secmark=0 use=1
  1164. tcp 6 423106 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=34921 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=34921 packets=0 bytes=0 mark=0 secmark=0 use=1
  1165. tcp 6 118 SYN_SENT src=172.16.131.2 dst=208.73.214.9 sport=16573 dport=135 packets=3 bytes=152 [UNREPLIED] src=208.73.214.9 dst=172.16.131.2 sport=135 dport=16573 packets=0 bytes=0 mark=0 secmark=0 use=1
  1166. tcp 6 97 TIME_WAIT src=172.16.99.5 dst=74.125.39.165 sport=34661 dport=80 packets=5 bytes=268 src=74.125.39.165 dst=xxx.xxx.xxx.21 sport=80 dport=34661 packets=3 bytes=164 [ASSURED] mark=0 secmark=0 use=1
  1167. tcp 6 29 TIME_WAIT src=172.16.33.4 dst=216.38.170.127 sport=53910 dport=80 packets=742 bytes=37440 src=216.38.170.127 dst=xxx.xxx.xxx.21 sport=80 dport=53910 packets=1144 bytes=1695530 [ASSURED] mark=0 secmark=0 use=1
  1168. tcp 6 330292 ESTABLISHED src=172.16.99.41 dst=172.16.0.65 sport=56391 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.41 sport=80 dport=56391 packets=0 bytes=0 mark=0 secmark=0 use=1
  1169. tcp 6 2 TIME_WAIT src=172.16.33.4 dst=217.72.202.242 sport=53938 dport=80 packets=5 bytes=643 src=217.72.202.242 dst=xxx.xxx.xxx.21 sport=80 dport=53938 packets=5 bytes=479 [ASSURED] mark=0 secmark=0 use=1
  1170. tcp 6 115 TIME_WAIT src=172.16.0.62 dst=172.16.0.75 sport=64502 dport=135 packets=8 bytes=828 src=172.16.0.75 dst=172.16.0.62 sport=135 dport=64502 packets=6 bytes=800 [ASSURED] mark=0 secmark=0 use=1
  1171. tcp 6 256736 ESTABLISHED src=172.16.99.51 dst=172.16.0.65 sport=55170 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.51 sport=80 dport=55170 packets=0 bytes=0 mark=0 secmark=0 use=1
  1172. udp 17 176 src=172.16.22.247 dst=172.16.22.72 sport=29101 dport=5011 packets=1005 bytes=108540 src=172.16.22.72 dst=172.16.22.247 sport=5011 dport=29101 packets=1005 bytes=80400 [ASSURED] mark=0 secmark=0 use=1
  1173. tcp 6 330037 ESTABLISHED src=172.16.99.41 dst=172.16.0.65 sport=59750 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.41 sport=80 dport=59750 packets=0 bytes=0 mark=0 secmark=0 use=1
  1174. udp 17 29 src=xxx.xxx.xxx.18 dst=141.1.1.1 sport=59969 dport=53 packets=1 bytes=73 src=141.1.1.1 dst=xxx.xxx.xxx.18 sport=53 dport=59969 packets=1 bytes=225 mark=0 secmark=0 use=1
  1175. tcp 6 330473 ESTABLISHED src=172.16.99.41 dst=172.16.0.65 sport=56415 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.41 sport=80 dport=56415 packets=0 bytes=0 mark=0 secmark=0 use=1
  1176. udp 17 25 src=172.16.129.7 dst=172.16.255.255 sport=137 dport=137 packets=4 bytes=312 [UNREPLIED] src=172.16.255.255 dst=172.16.129.7 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=1
  1177. tcp 6 5 TIME_WAIT src=172.16.33.4 dst=217.72.200.153 sport=53885 dport=80 packets=14 bytes=2706 src=217.72.200.153 dst=xxx.xxx.xxx.21 sport=80 dport=53885 packets=14 bytes=11918 [ASSURED] mark=0 secmark=0 use=1
  1178. tcp 6 11 TIME_WAIT src=172.16.33.4 dst=199.16.83.72 sport=54042 dport=80 packets=6 bytes=787 src=199.16.83.72 dst=xxx.xxx.xxx.21 sport=80 dport=54042 packets=7 bytes=2217 [ASSURED] mark=0 secmark=0 use=1
  1179. tcp 6 405135 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=57490 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=57490 packets=0 bytes=0 mark=0 secmark=0 use=1
  1180. tcp 6 412314 ESTABLISHED src=172.16.98.13 dst=172.16.130.20 sport=16050 dport=56713 packets=296 bytes=18565 [UNREPLIED] src=172.16.130.20 dst=172.16.98.13 sport=56713 dport=16050 packets=0 bytes=0 mark=0 secmark=0 use=1
  1181. tcp 6 431998 ESTABLISHED src=172.16.99.4 dst=78.46.63.9 sport=39291 dport=993 packets=5 bytes=765 [UNREPLIED] src=78.46.63.9 dst=172.16.99.4 sport=993 dport=39291 packets=0 bytes=0 mark=0 secmark=0 use=1
  1182. udp 17 24 src=xxx.xxx.xxx.18 dst=141.1.1.1 sport=49598 dport=53 packets=1 bytes=73 src=141.1.1.1 dst=xxx.xxx.xxx.18 sport=53 dport=49598 packets=1 bytes=225 mark=0 secmark=0 use=1
  1183. tcp 6 14 TIME_WAIT src=172.16.99.25 dst=209.85.148.104 sport=54410 dport=80 packets=8 bytes=2646 src=209.85.148.104 dst=xxx.xxx.xxx.21 sport=80 dport=54410 packets=7 bytes=4980 [ASSURED] mark=0 secmark=0 use=1
  1184. tcp 6 232330 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=64174 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=64174 packets=0 bytes=0 mark=0 secmark=0 use=1
  1185. tcp 6 431998 ESTABLISHED src=172.16.99.5 dst=209.85.148.155 sport=43420 dport=80 packets=7 bytes=1675 src=209.85.148.155 dst=xxx.xxx.xxx.21 sport=80 dport=43420 packets=6 bytes=2926 [ASSURED] mark=0 secmark=0 use=1
  1186. tcp 6 431978 ESTABLISHED src=172.16.0.5 dst=172.16.0.65 sport=35293 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.0.5 sport=80 dport=35293 packets=0 bytes=0 mark=0 secmark=0 use=1
  1187. tcp 6 427242 ESTABLISHED src=172.16.98.15 dst=172.16.119.24 sport=36511 dport=1521 packets=98 bytes=5096 [UNREPLIED] src=172.16.119.24 dst=172.16.98.15 sport=1521 dport=36511 packets=0 bytes=0 mark=0 secmark=0 use=1
  1188. tcp 6 345870 ESTABLISHED src=172.16.99.4 dst=172.16.0.65 sport=59643 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.4 sport=80 dport=59643 packets=0 bytes=0 mark=0 secmark=0 use=1
  1189. udp 17 13 src=172.16.99.4 dst=172.16.255.255 sport=17500 dport=17500 packets=1 bytes=147 [UNREPLIED] src=172.16.255.255 dst=172.16.99.4 sport=17500 dport=17500 packets=0 bytes=0 mark=0 secmark=0 use=1
  1190. tcp 6 145985 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=53449 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=53449 packets=0 bytes=0 mark=0 secmark=0 use=1
  1191. udp 17 2 src=172.16.199.31 dst=172.16.255.255 sport=138 dport=138 packets=1 bytes=255 [UNREPLIED] src=172.16.255.255 dst=172.16.199.31 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
  1192. tcp 6 10 TIME_WAIT src=172.16.33.4 dst=199.16.83.72 sport=53976 dport=80 packets=6 bytes=785 src=199.16.83.72 dst=xxx.xxx.xxx.21 sport=80 dport=53976 packets=7 bytes=1786 [ASSURED] mark=0 secmark=0 use=1
  1193. tcp 6 45 SYN_SENT src=172.16.99.4 dst=10.8.0.242 sport=48751 dport=8080 packets=6 bytes=360 [UNREPLIED] src=10.8.0.242 dst=172.16.99.4 sport=8080 dport=48751 packets=0 bytes=0 mark=0 secmark=0 use=1
  1194. tcp 6 414060 ESTABLISHED src=172.16.98.13 dst=172.16.130.20 sport=16050 dport=57176 packets=383 bytes=30873 [UNREPLIED] src=172.16.130.20 dst=172.16.98.13 sport=57176 dport=16050 packets=0 bytes=0 mark=0 secmark=0 use=1
  1195. tcp 6 405231 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=57546 dport=7635 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=7635 dport=57546 packets=0 bytes=0 mark=0 secmark=0 use=1
  1196. tcp 6 330037 ESTABLISHED src=172.16.99.41 dst=172.16.0.65 sport=59754 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.41 sport=80 dport=59754 packets=0 bytes=0 mark=0 secmark=0 use=1
  1197. tcp 6 116 TIME_WAIT src=172.16.0.5 dst=208.50.223.240 sport=56487 dport=80 packets=6 bytes=1089 src=208.50.223.240 dst=xxx.xxx.xxx.21 sport=80 dport=56487 packets=6 bytes=531 [ASSURED] mark=0 secmark=0 use=1
  1198. tcp 6 431891 ESTABLISHED src=172.16.0.70 dst=172.16.0.75 sport=54489 dport=445 packets=52403 bytes=8161488 src=172.16.0.75 dst=172.16.0.70 sport=445 dport=54489 packets=40356 bytes=6992160 [ASSURED] mark=0 secmark=0 use=1
  1199. tcp 6 405231 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=57544 dport=7635 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=7635 dport=57544 packets=0 bytes=0 mark=0 secmark=0 use=1
  1200. tcp 6 372546 ESTABLISHED src=172.16.0.7 dst=172.16.0.75 sport=35018 dport=389 packets=6 bytes=2340 [UNREPLIED] src=172.16.0.75 dst=172.16.0.7 sport=389 dport=35018 packets=0 bytes=0 mark=0 secmark=0 use=1
  1201. tcp 6 59573 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=58005 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=58005 packets=0 bytes=0 mark=0 secmark=0 use=1
  1202. tcp 6 428853 ESTABLISHED src=172.16.99.3 dst=172.16.0.65 sport=59009 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.3 sport=80 dport=59009 packets=0 bytes=0 mark=0 secmark=0 use=1
  1203. tcp 6 412219 ESTABLISHED src=172.16.98.13 dst=172.16.130.20 sport=16050 dport=56684 packets=49 bytes=3823 [UNREPLIED] src=172.16.130.20 dst=172.16.98.13 sport=56684 dport=16050 packets=0 bytes=0 mark=0 secmark=0 use=1
  1204. tcp 6 431998 ESTABLISHED src=172.16.99.5 dst=209.85.148.155 sport=37086 dport=443 packets=1 bytes=52 src=209.85.148.155 dst=xxx.xxx.xxx.18 sport=443 dport=37086 packets=1 bytes=52 mark=0 secmark=0 use=1
  1205. tcp 6 427170 ESTABLISHED src=172.16.0.5 dst=172.16.0.65 sport=50115 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.0.5 sport=80 dport=50115 packets=0 bytes=0 mark=0 secmark=0 use=1
  1206. tcp 6 21877 ESTABLISHED src=172.16.0.9 dst=10.8.0.18 sport=143 dport=49962 packets=1 bytes=65 [UNREPLIED] src=10.8.0.18 dst=172.16.0.9 sport=49962 dport=143 packets=0 bytes=0 mark=0 secmark=0 use=1
  1207. tcp 6 431990 ESTABLISHED src=172.16.99.2 dst=74.125.79.100 sport=60967 dport=80 packets=6 bytes=1570 src=74.125.79.100 dst=xxx.xxx.xxx.21 sport=80 dport=60967 packets=4 bytes=1319 [ASSURED] mark=0 secmark=0 use=1
  1208. tcp 6 414481 ESTABLISHED src=172.16.98.13 dst=172.16.130.20 sport=16050 dport=57295 packets=1870 bytes=114869 [UNREPLIED] src=172.16.130.20 dst=172.16.98.13 sport=57295 dport=16050 packets=0 bytes=0 mark=0 secmark=0 use=1
  1209. tcp 6 117 SYN_SENT src=172.16.33.4 dst=217.72.197.108 sport=54269 dport=443 packets=2 bytes=104 [UNREPLIED] src=217.72.197.108 dst=172.16.33.4 sport=443 dport=54269 packets=0 bytes=0 mark=0 secmark=0 use=1
  1210. tcp 6 412663 ESTABLISHED src=172.16.98.13 dst=172.16.130.20 sport=16050 dport=56835 packets=874 bytes=56012 [UNREPLIED] src=172.16.130.20 dst=172.16.98.13 sport=56835 dport=16050 packets=0 bytes=0 mark=0 secmark=0 use=1
  1211. tcp 6 51 TIME_WAIT src=172.16.33.4 dst=188.72.250.210 sport=54176 dport=80 packets=6 bytes=2542 src=188.72.250.210 dst=xxx.xxx.xxx.21 sport=80 dport=54176 packets=6 bytes=726 [ASSURED] mark=0 secmark=0 use=1
  1212. udp 17 24 src=172.16.0.4 dst=172.16.255.255 sport=54333 dport=3052 packets=9552 bytes=6693482 [UNREPLIED] src=172.16.255.255 dst=172.16.0.4 sport=3052 dport=54333 packets=0 bytes=0 mark=0 secmark=0 use=1
  1213. tcp 6 256404 ESTABLISHED src=172.16.33.4 dst=172.16.0.65 sport=58842 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.33.4 sport=80 dport=58842 packets=0 bytes=0 mark=0 secmark=0 use=1
  1214. tcp 6 268527 ESTABLISHED src=172.16.0.5 dst=172.16.0.65 sport=50058 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.0.5 sport=80 dport=50058 packets=0 bytes=0 mark=0 secmark=0 use=1
  1215. udp 17 20 src=172.16.99.24 dst=224.0.0.252 sport=65114 dport=5355 packets=1 bytes=52 [UNREPLIED] src=224.0.0.252 dst=172.16.99.24 sport=5355 dport=65114 packets=0 bytes=0 mark=0 secmark=0 use=1
  1216. tcp 6 427246 ESTABLISHED src=172.16.98.15 dst=172.16.119.24 sport=36512 dport=1521 packets=8 bytes=416 [UNREPLIED] src=172.16.119.24 dst=172.16.98.15 sport=1521 dport=36512 packets=0 bytes=0 mark=0 secmark=0 use=1
  1217. tcp 6 145930 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=53425 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=53425 packets=0 bytes=0 mark=0 secmark=0 use=1
  1218. tcp 6 59519 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=57981 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=57981 packets=0 bytes=0 mark=0 secmark=0 use=1
  1219. tcp 6 86 TIME_WAIT src=172.16.0.5 dst=208.50.223.240 sport=48647 dport=80 packets=7 bytes=1141 src=208.50.223.240 dst=xxx.xxx.xxx.21 sport=80 dport=48647 packets=5 bytes=479 [ASSURED] mark=0 secmark=0 use=1
  1220. tcp 6 102 TIME_WAIT src=172.16.99.4 dst=80.157.150.66 sport=56140 dport=80 packets=7 bytes=898 src=80.157.150.66 dst=xxx.xxx.xxx.21 sport=80 dport=56140 packets=5 bytes=930 [ASSURED] mark=0 secmark=0 use=1
  1221. tcp 6 97 TIME_WAIT src=172.16.99.5 dst=64.78.181.5 sport=38036 dport=80 packets=26 bytes=2469 src=64.78.181.5 dst=xxx.xxx.xxx.21 sport=80 dport=38036 packets=26 bytes=29746 [ASSURED] mark=0 secmark=0 use=1
  1222. tcp 6 77 TIME_WAIT src=172.16.44.14 dst=141.6.2.171 sport=55861 dport=80 packets=6 bytes=730 src=141.6.2.171 dst=xxx.xxx.xxx.21 sport=80 dport=55861 packets=5 bytes=316 [ASSURED] mark=0 secmark=0 use=1
  1223. tcp 6 256736 ESTABLISHED src=172.16.99.51 dst=172.16.0.65 sport=44916 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.51 sport=80 dport=44916 packets=0 bytes=0 mark=0 secmark=0 use=1
  1224. tcp 6 431913 ESTABLISHED src=172.16.98.13 dst=172.16.0.9 sport=41753 dport=143 packets=1504 bytes=91124 src=172.16.0.9 dst=172.16.98.13 sport=143 dport=41753 packets=1386 bytes=927034 [ASSURED] mark=0 secmark=0 use=1
  1225. tcp 6 10 TIME_WAIT src=172.16.33.4 dst=213.165.65.140 sport=53872 dport=80 packets=27 bytes=1571 src=213.165.65.140 dst=xxx.xxx.xxx.21 sport=80 dport=53872 packets=46 bytes=62959 [ASSURED] mark=0 secmark=0 use=1
  1226. tcp 6 330298 ESTABLISHED src=172.16.99.4 dst=172.16.0.65 sport=46273 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.4 sport=80 dport=46273 packets=0 bytes=0 mark=0 secmark=0 use=1
  1227. tcp 6 425600 ESTABLISHED src=172.16.99.33 dst=172.16.0.76 sport=1469 dport=135 packets=1 bytes=40 [UNREPLIED] src=172.16.0.76 dst=172.16.99.33 sport=135 dport=1469 packets=0 bytes=0 mark=0 secmark=0 use=1
  1228. tcp 6 431990 ESTABLISHED src=172.16.99.2 dst=74.125.79.101 sport=55311 dport=80 packets=4 bytes=1044 src=74.125.79.101 dst=xxx.xxx.xxx.21 sport=80 dport=55311 packets=3 bytes=734 [ASSURED] mark=0 secmark=0 use=1
  1229. tcp 6 251899 ESTABLISHED src=172.16.0.9 dst=10.8.0.18 sport=143 dport=49357 packets=1 bytes=65 [UNREPLIED] src=10.8.0.18 dst=172.16.0.9 sport=49357 dport=143 packets=0 bytes=0 mark=0 secmark=0 use=1
  1230. tcp 6 49 TIME_WAIT src=172.16.33.4 dst=66.135.204.19 sport=53723 dport=80 packets=6 bytes=1025 src=66.135.204.19 dst=xxx.xxx.xxx.21 sport=80 dport=53723 packets=3 bytes=1567 [ASSURED] mark=0 secmark=0 use=1
  1231. tcp 6 232299 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=64170 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=64170 packets=0 bytes=0 mark=0 secmark=0 use=1
  1232. tcp 6 78 TIME_WAIT src=172.16.99.4 dst=141.6.2.171 sport=35252 dport=80 packets=7 bytes=761 src=141.6.2.171 dst=xxx.xxx.xxx.21 sport=80 dport=35252 packets=5 bytes=376 [ASSURED] mark=0 secmark=0 use=1
  1233. tcp 6 145985 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=53448 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=53448 packets=0 bytes=0 mark=0 secmark=0 use=1
  1234. tcp 6 328449 ESTABLISHED src=172.16.0.9 dst=10.8.0.198 sport=143 dport=47924 packets=1 bytes=77 [UNREPLIED] src=10.8.0.198 dst=172.16.0.9 sport=47924 dport=143 packets=0 bytes=0 mark=0 secmark=0 use=1
  1235. tcp 6 282391 ESTABLISHED src=172.16.66.15 dst=172.16.0.75 sport=54186 dport=3268 packets=5 bytes=311 src=172.16.0.75 dst=172.16.66.15 sport=3268 dport=54186 packets=4 bytes=2925 [ASSURED] mark=0 secmark=0 use=1
  1236. tcp 6 45 SYN_SENT src=172.16.99.4 dst=10.8.0.242 sport=48750 dport=8080 packets=6 bytes=360 [UNREPLIED] src=10.8.0.242 dst=172.16.99.4 sport=8080 dport=48750 packets=0 bytes=0 mark=0 secmark=0 use=1
  1237. tcp 6 14 TIME_WAIT src=172.16.99.25 dst=xxx.xxx.xxx.18 sport=54435 dport=80 packets=6 bytes=395 src=xxx.xxx.xxx.18 dst=172.16.99.25 sport=80 dport=54435 packets=5 bytes=552 [ASSURED] mark=0 secmark=0 use=1
  1238. udp 17 27 src=172.16.0.7 dst=172.16.255.255 sport=138 dport=138 packets=1 bytes=229 [UNREPLIED] src=172.16.255.255 dst=172.16.0.7 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
  1239. tcp 6 330037 ESTABLISHED src=172.16.99.41 dst=172.16.0.65 sport=59753 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.41 sport=80 dport=59753 packets=0 bytes=0 mark=0 secmark=0 use=1
  1240. udp 17 29 src=xxx.xxx.xxx.18 dst=87.106.252.163 sport=55431 dport=53 packets=1 bytes=73 src=87.106.252.163 dst=xxx.xxx.xxx.18 sport=53 dport=55431 packets=1 bytes=73 mark=0 secmark=0 use=1
  1241. tcp 6 63 TIME_WAIT src=172.16.44.14 dst=141.6.2.171 sport=55840 dport=80 packets=6 bytes=730 src=141.6.2.171 dst=xxx.xxx.xxx.21 sport=80 dport=55840 packets=5 bytes=316 [ASSURED] mark=0 secmark=0 use=1
  1242. tcp 6 431987 ESTABLISHED src=172.16.99.5 dst=199.47.216.149 sport=43738 dport=80 packets=230 bytes=60546 src=199.47.216.149 dst=xxx.xxx.xxx.21 sport=80 dport=43738 packets=454 bytes=64070 [ASSURED] mark=0 secmark=0 use=1
  1243. tcp 6 166686 ESTABLISHED src=172.16.0.11 dst=172.16.0.34 sport=35261 dport=443 packets=2 bytes=1005 [UNREPLIED] src=172.16.0.34 dst=172.16.0.11 sport=443 dport=35261 packets=0 bytes=0 mark=0 secmark=0 use=1
  1244. tcp 6 45 SYN_SENT src=172.16.99.4 dst=10.8.0.242 sport=48748 dport=8080 packets=6 bytes=360 [UNREPLIED] src=10.8.0.242 dst=172.16.99.4 sport=8080 dport=48748 packets=0 bytes=0 mark=0 secmark=0 use=1
  1245. tcp 6 232283 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=64125 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=64125 packets=0 bytes=0 mark=0 secmark=0 use=1
  1246. tcp 6 431900 ESTABLISHED src=172.16.99.51 dst=66.102.13.138 sport=51263 dport=80 packets=9 bytes=2915 src=66.102.13.138 dst=xxx.xxx.xxx.21 sport=80 dport=51263 packets=6 bytes=2978 [ASSURED] mark=0 secmark=0 use=1
  1247. tcp 6 232283 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=64153 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=64153 packets=0 bytes=0 mark=0 secmark=0 use=1
  1248. tcp 6 232283 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=64152 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=64152 packets=0 bytes=0 mark=0 secmark=0 use=1
  1249. tcp 6 431980 ESTABLISHED src=172.16.99.9 dst=209.85.227.100 sport=50466 dport=80 packets=9 bytes=1862 src=209.85.227.100 dst=xxx.xxx.xxx.21 sport=80 dport=50466 packets=8 bytes=1335 [ASSURED] mark=0 secmark=0 use=1
  1250. tcp 6 115 TIME_WAIT src=172.16.99.35 dst=87.248.217.254 sport=51627 dport=80 packets=15 bytes=987 src=87.248.217.254 dst=xxx.xxx.xxx.21 sport=80 dport=51627 packets=15 bytes=14645 [ASSURED] mark=0 secmark=0 use=1
  1251. tcp 6 95 TIME_WAIT src=172.16.99.43 dst=66.102.13.138 sport=50590 dport=80 packets=7 bytes=708 src=66.102.13.138 dst=xxx.xxx.xxx.21 sport=80 dport=50590 packets=5 bytes=1034 [ASSURED] mark=0 secmark=0 use=1
  1252. tcp 6 59519 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=57983 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=57983 packets=0 bytes=0 mark=0 secmark=0 use=1
  1253. tcp 6 12 TIME_WAIT src=172.16.33.4 dst=213.165.64.75 sport=53868 dport=80 packets=14 bytes=2176 src=213.165.64.75 dst=xxx.xxx.xxx.21 sport=80 dport=53868 packets=18 bytes=19471 [ASSURED] mark=0 secmark=0 use=1
  1254. tcp 6 431983 ESTABLISHED src=172.16.0.62 dst=172.16.0.75 sport=64503 dport=49155 packets=9 bytes=3088 src=172.16.0.75 dst=172.16.0.62 sport=49155 dport=64503 packets=7 bytes=1471 [ASSURED] mark=0 secmark=0 use=1
  1255. tcp 6 431999 ESTABLISHED src=194.120.195.122 dst=xxx.xxx.xxx.18 sport=61487 dport=443 packets=1505 bytes=224894 src=xxx.xxx.xxx.18 dst=194.120.195.122 sport=443 dport=61487 packets=1207 bytes=2890190 [ASSURED] mark=0 secmark=0 use=1
  1256. tcp 6 7 TIME_WAIT src=172.16.33.4 dst=213.165.66.209 sport=53889 dport=80 packets=16 bytes=2681 src=213.165.66.209 dst=xxx.xxx.xxx.21 sport=80 dport=53889 packets=16 bytes=14914 [ASSURED] mark=0 secmark=0 use=1
  1257. tcp 6 431885 ESTABLISHED src=172.16.33.4 dst=195.27.183.168 sport=53935 dport=80 packets=6 bytes=2025 src=195.27.183.168 dst=xxx.xxx.xxx.21 sport=80 dport=53935 packets=5 bytes=1313 [ASSURED] mark=0 secmark=0 use=1
  1258. tcp 6 259108 ESTABLISHED src=172.16.33.4 dst=172.16.0.65 sport=59301 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.33.4 sport=80 dport=59301 packets=0 bytes=0 mark=0 secmark=0 use=1
  1259. tcp 6 58 TIME_WAIT src=172.16.0.7 dst=172.16.0.75 sport=48214 dport=49155 packets=16 bytes=3480 src=172.16.0.75 dst=172.16.0.7 sport=49155 dport=48214 packets=13 bytes=2294 [ASSURED] mark=0 secmark=0 use=1
  1260. tcp 6 5 TIME_WAIT src=172.16.33.4 dst=217.72.200.153 sport=53892 dport=80 packets=14 bytes=2713 src=217.72.200.153 dst=xxx.xxx.xxx.21 sport=80 dport=53892 packets=16 bytes=9824 [ASSURED] mark=0 secmark=0 use=1
  1261. tcp 6 431990 ESTABLISHED src=91.53.35.130 dst=xxx.xxx.xxx.18 sport=49209 dport=443 packets=647 bytes=62562 src=xxx.xxx.xxx.18 dst=91.53.35.130 sport=443 dport=49209 packets=674 bytes=83834 [ASSURED] mark=0 secmark=0 use=1
  1262. tcp 6 431997 ESTABLISHED src=172.16.99.5 dst=209.189.227.38 sport=57107 dport=80 packets=3 bytes=788 src=209.189.227.38 dst=xxx.xxx.xxx.21 sport=80 dport=57107 packets=2 bytes=112 [ASSURED] mark=0 secmark=0 use=1
  1263. udp 17 24 src=xxx.xxx.xxx.18 dst=141.1.1.1 sport=49884 dport=53 packets=1 bytes=73 src=141.1.1.1 dst=xxx.xxx.xxx.18 sport=53 dport=49884 packets=1 bytes=263 mark=0 secmark=0 use=1
  1264. tcp 6 431964 ESTABLISHED src=172.16.98.13 dst=172.16.0.9 sport=742 dport=2049 packets=6276 bytes=741064 src=172.16.0.9 dst=172.16.98.13 sport=2049 dport=742 packets=3146 bytes=482432 [ASSURED] mark=0 secmark=0 use=1
  1265. tcp 6 84 TIME_WAIT src=111.148.8.41 dst=xxx.xxx.xxx.20 sport=3313 dport=25 packets=7 bytes=377 src=172.16.0.9 dst=111.148.8.41 sport=25 dport=3313 packets=9 bytes=725 [ASSURED] mark=0 secmark=0 use=1
  1266. tcp 6 430624 ESTABLISHED src=172.16.98.15 dst=172.16.0.9 sport=60457 dport=143 packets=8390 bytes=808582 src=172.16.0.9 dst=172.16.98.15 sport=143 dport=60457 packets=4286 bytes=701394 [ASSURED] mark=0 secmark=0 use=1
  1267. tcp 6 426536 ESTABLISHED src=172.16.0.7 dst=172.16.0.75 sport=1043 dport=49155 packets=232 bytes=14701 src=172.16.0.75 dst=172.16.0.7 sport=49155 dport=1043 packets=229 bytes=11931 [ASSURED] mark=0 secmark=0 use=1
  1268. tcp 6 4 TIME_WAIT src=172.16.33.4 dst=217.72.200.153 sport=53894 dport=80 packets=14 bytes=2709 src=217.72.200.153 dst=xxx.xxx.xxx.21 sport=80 dport=53894 packets=16 bytes=13104 [ASSURED] mark=0 secmark=0 use=1
  1269. tcp 6 431987 ESTABLISHED src=172.16.44.14 dst=141.6.2.171 sport=54678 dport=80 packets=27 bytes=6120 src=141.6.2.171 dst=xxx.xxx.xxx.21 sport=80 dport=1123 packets=25 bytes=14479 [ASSURED] mark=0 secmark=0 use=1
  1270. tcp 6 268352 ESTABLISHED src=172.16.99.25 dst=172.16.0.75 sport=53465 dport=49155 packets=9 bytes=3036 src=172.16.0.75 dst=172.16.99.25 sport=49155 dport=53465 packets=7 bytes=1342 [ASSURED] mark=0 secmark=0 use=1
  1271. tcp 6 7 TIME_WAIT src=172.16.33.4 dst=213.165.66.209 sport=53875 dport=80 packets=10 bytes=1599 src=213.165.66.209 dst=xxx.xxx.xxx.21 sport=80 dport=53875 packets=7 bytes=4347 [ASSURED] mark=0 secmark=0 use=1
  1272. tcp 6 431900 ESTABLISHED src=172.16.99.51 dst=209.85.227.113 sport=54640 dport=80 packets=4 bytes=1071 src=209.85.227.113 dst=xxx.xxx.xxx.21 sport=80 dport=54640 packets=3 bytes=1027 [ASSURED] mark=0 secmark=0 use=1
  1273. tcp 6 345870 ESTABLISHED src=172.16.99.4 dst=172.16.0.65 sport=59644 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.4 sport=80 dport=59644 packets=0 bytes=0 mark=0 secmark=0 use=1
  1274. tcp 6 405085 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=57470 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=57470 packets=0 bytes=0 mark=0 secmark=0 use=1
  1275. udp 17 20 src=172.16.99.24 dst=224.0.0.252 sport=50661 dport=5355 packets=1 bytes=52 [UNREPLIED] src=224.0.0.252 dst=172.16.99.24 sport=5355 dport=50661 packets=0 bytes=0 mark=0 secmark=0 use=1
  1276. tcp 6 10 TIME_WAIT src=172.16.33.4 dst=199.16.83.72 sport=53980 dport=80 packets=6 bytes=785 src=199.16.83.72 dst=xxx.xxx.xxx.21 sport=80 dport=53980 packets=7 bytes=2100 [ASSURED] mark=0 secmark=0 use=1
  1277. tcp 6 330037 ESTABLISHED src=172.16.99.41 dst=172.16.0.65 sport=59751 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.41 sport=80 dport=59751 packets=0 bytes=0 mark=0 secmark=0 use=1
  1278. tcp 6 87 TIME_WAIT src=172.16.99.5 dst=64.78.181.5 sport=38033 dport=80 packets=19 bytes=4480 src=64.78.181.5 dst=xxx.xxx.xxx.21 sport=80 dport=38033 packets=18 bytes=12799 [ASSURED] mark=0 secmark=0 use=1
  1279. tcp 6 346497 ESTABLISHED src=172.16.0.9 dst=10.8.0.218 sport=143 dport=55448 packets=2 bytes=194 [UNREPLIED] src=10.8.0.218 dst=172.16.0.9 sport=55448 dport=143 packets=0 bytes=0 mark=0 secmark=0 use=1
  1280. tcp 6 331965 ESTABLISHED src=172.16.0.5 dst=172.16.0.65 sport=34124 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.0.5 sport=80 dport=34124 packets=0 bytes=0 mark=0 secmark=0 use=1
  1281. tcp 6 431942 ESTABLISHED src=172.16.99.22 dst=74.125.79.101 sport=53804 dport=80 packets=6 bytes=2181 src=74.125.79.101 dst=xxx.xxx.xxx.21 sport=80 dport=53804 packets=4 bytes=876 [ASSURED] mark=0 secmark=0 use=1
  1282. udp 17 20 src=172.16.99.24 dst=224.0.0.252 sport=58159 dport=5355 packets=1 bytes=52 [UNREPLIED] src=224.0.0.252 dst=172.16.99.24 sport=5355 dport=58159 packets=0 bytes=0 mark=0 secmark=0 use=1
  1283. tcp 6 337610 ESTABLISHED src=172.16.99.22 dst=172.16.0.65 sport=57515 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.22 sport=80 dport=57515 packets=0 bytes=0 mark=0 secmark=0 use=1
  1284. tcp 6 411798 ESTABLISHED src=172.16.98.13 dst=172.16.130.20 sport=16050 dport=56571 packets=1787 bytes=110879 [UNREPLIED] src=172.16.130.20 dst=172.16.98.13 sport=56571 dport=16050 packets=0 bytes=0 mark=0 secmark=0 use=1
  1285. tcp 6 318747 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=52773 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=52773 packets=0 bytes=0 mark=0 secmark=0 use=1
  1286. tcp 6 263554 ESTABLISHED src=172.16.99.9 dst=172.16.0.65 sport=52730 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.9 sport=80 dport=52730 packets=0 bytes=0 mark=0 secmark=0 use=1
  1287. tcp 6 330037 ESTABLISHED src=172.16.99.41 dst=172.16.0.65 sport=59755 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.41 sport=80 dport=59755 packets=0 bytes=0 mark=0 secmark=0 use=1
  1288. tcp 6 256402 ESTABLISHED src=172.16.33.4 dst=172.16.0.65 sport=58839 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.33.4 sport=80 dport=58839 packets=0 bytes=0 mark=0 secmark=0 use=1
  1289. tcp 6 431973 ESTABLISHED src=172.16.98.15 dst=172.16.0.5 sport=57957 dport=5222 packets=1559 bytes=162350 src=172.16.0.5 dst=172.16.98.15 sport=5222 dport=57957 packets=1123 bytes=404851 [ASSURED] mark=0 secmark=0 use=1
  1290. tcp 6 431972 ESTABLISHED src=172.16.44.14 dst=141.6.2.171 sport=55934 dport=80 packets=4 bytes=606 src=141.6.2.171 dst=xxx.xxx.xxx.21 sport=80 dport=55934 packets=2 bytes=92 [ASSURED] mark=0 secmark=0 use=1
  1291. tcp 6 431958 ESTABLISHED src=172.16.99.9 dst=199.47.217.148 sport=37502 dport=80 packets=58 bytes=16004 src=199.47.217.148 dst=xxx.xxx.xxx.21 sport=80 dport=37502 packets=110 bytes=15394 [ASSURED] mark=0 secmark=0 use=1
  1292. tcp 6 40 TIME_WAIT src=172.16.99.4 dst=141.6.2.171 sport=35204 dport=80 packets=7 bytes=725 src=141.6.2.171 dst=xxx.xxx.xxx.21 sport=80 dport=35204 packets=5 bytes=376 [ASSURED] mark=0 secmark=0 use=1
  1293. tcp 6 29 TIME_WAIT src=172.16.99.25 dst=213.244.185.36 sport=54443 dport=80 packets=6 bytes=711 src=213.244.185.36 dst=xxx.xxx.xxx.21 sport=80 dport=54443 packets=6 bytes=1525 [ASSURED] mark=0 secmark=0 use=1
  1294. tcp 6 63 TIME_WAIT src=172.16.99.4 dst=141.6.2.171 sport=35230 dport=80 packets=7 bytes=761 src=141.6.2.171 dst=xxx.xxx.xxx.21 sport=80 dport=35230 packets=5 bytes=376 [ASSURED] mark=0 secmark=0 use=1
  1295. tcp 6 251849 ESTABLISHED src=172.16.99.4 dst=172.16.0.65 sport=45185 dport=80 packets=2 bytes=104 [UNREPLIED] src=172.16.0.65 dst=172.16.99.4 sport=80 dport=45185 packets=0 bytes=0 mark=0 secmark=0 use=1
  1296. tcp 6 330298 ESTABLISHED src=172.16.99.4 dst=172.16.0.65 sport=46270 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.4 sport=80 dport=46270 packets=0 bytes=0 mark=0 secmark=0 use=1
  1297. tcp 6 345870 ESTABLISHED src=172.16.99.4 dst=172.16.0.65 sport=59645 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.4 sport=80 dport=59645 packets=0 bytes=0 mark=0 secmark=0 use=1
  1298. tcp 6 431999 ESTABLISHED src=172.16.99.24 dst=64.12.30.71 sport=49405 dport=443 packets=5 bytes=230 [UNREPLIED] src=64.12.30.71 dst=172.16.99.24 sport=443 dport=49405 packets=0 bytes=0 mark=0 secmark=0 use=1
  1299. tcp 6 117 SYN_SENT src=172.16.0.11 dst=212.227.81.212 sport=57085 dport=80 packets=1 bytes=60 [UNREPLIED] src=212.227.81.212 dst=172.16.0.11 sport=80 dport=57085 packets=0 bytes=0 mark=0 secmark=0 use=1
  1300. udp 17 12 src=172.16.99.9 dst=255.255.255.255 sport=17500 dport=17500 packets=1 bytes=157 [UNREPLIED] src=255.255.255.255 dst=172.16.99.9 sport=17500 dport=17500 packets=0 bytes=0 mark=0 secmark=0 use=1
  1301. tcp 6 330298 ESTABLISHED src=172.16.99.4 dst=172.16.0.65 sport=46272 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.4 sport=80 dport=46272 packets=0 bytes=0 mark=0 secmark=0 use=1
  1302. tcp 6 249538 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=47443 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=47443 packets=0 bytes=0 mark=0 secmark=0 use=1
  1303. tcp 6 431736 ESTABLISHED src=10.8.0.214 dst=172.16.0.9 sport=61562 dport=143 packets=1163 bytes=63047 src=172.16.0.9 dst=10.8.0.214 sport=143 dport=61562 packets=1961 bytes=2675013 [ASSURED] mark=0 secmark=0 use=1
  1304. tcp 6 346107 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=40366 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=40366 packets=0 bytes=0 mark=0 secmark=0 use=1
  1305. tcp 6 404983 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=57456 dport=7635 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=7635 dport=57456 packets=0 bytes=0 mark=0 secmark=0 use=1
  1306. tcp 6 1 TIME_WAIT src=172.16.33.4 dst=217.72.204.172 sport=53898 dport=80 packets=5 bytes=735 src=217.72.204.172 dst=xxx.xxx.xxx.21 sport=80 dport=53898 packets=5 bytes=745 [ASSURED] mark=0 secmark=0 use=1
  1307. udp 17 20 src=172.16.99.24 dst=224.0.0.252 sport=56886 dport=5355 packets=1 bytes=52 [UNREPLIED] src=224.0.0.252 dst=172.16.99.24 sport=5355 dport=56886 packets=0 bytes=0 mark=0 secmark=0 use=1
  1308. tcp 6 431736 ESTABLISHED src=10.8.0.214 dst=172.16.0.9 sport=61564 dport=143 packets=43 bytes=2958 src=172.16.0.9 dst=10.8.0.214 sport=143 dport=61564 packets=27 bytes=10696 [ASSURED] mark=0 secmark=0 use=1
  1309. tcp 6 257543 ESTABLISHED src=172.16.99.9 dst=172.16.0.65 sport=46538 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.9 sport=80 dport=46538 packets=0 bytes=0 mark=0 secmark=0 use=1
  1310. tcp 6 250978 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=52496 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=52496 packets=0 bytes=0 mark=0 secmark=0 use=1
  1311. tcp 6 87 TIME_WAIT src=172.16.99.5 dst=209.85.148.147 sport=34989 dport=80 packets=5 bytes=268 src=209.85.148.147 dst=xxx.xxx.xxx.21 sport=80 dport=34989 packets=4 bytes=216 [ASSURED] mark=0 secmark=0 use=1
  1312. tcp 6 431931 ESTABLISHED src=172.16.33.4 dst=209.85.148.149 sport=54167 dport=80 packets=4 bytes=642 src=209.85.148.149 dst=xxx.xxx.xxx.21 sport=80 dport=54167 packets=3 bytes=363 [ASSURED] mark=0 secmark=0 use=1
  1313. tcp 6 1 TIME_WAIT src=172.16.33.4 dst=217.72.204.209 sport=53922 dport=80 packets=6 bytes=965 src=217.72.204.209 dst=xxx.xxx.xxx.21 sport=80 dport=53922 packets=7 bytes=4610 [ASSURED] mark=0 secmark=0 use=1
  1314. tcp 6 418103 ESTABLISHED src=172.16.99.4 dst=172.16.0.65 sport=34060 dport=80 packets=7 bytes=3140 [UNREPLIED] src=172.16.0.65 dst=172.16.99.4 sport=80 dport=34060 packets=0 bytes=0 mark=0 secmark=0 use=1
  1315. udp 17 25 src=172.16.30.17 dst=239.255.255.250 sport=1024 dport=1900 packets=2 bytes=628 [UNREPLIED] src=239.255.255.250 dst=172.16.30.17 sport=1900 dport=1024 packets=0 bytes=0 mark=0 secmark=0 use=1
  1316. tcp 6 431792 ESTABLISHED src=172.16.0.70 dst=172.16.0.75 sport=54485 dport=5722 packets=3540 bytes=151535 src=172.16.0.75 dst=172.16.0.70 sport=5722 dport=54485 packets=3541 bytes=185259 [ASSURED] mark=0 secmark=0 use=1
  1317. tcp 6 346107 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=40363 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=40363 packets=0 bytes=0 mark=0 secmark=0 use=1
  1318. tcp 6 431973 ESTABLISHED src=172.16.99.9 dst=66.135.204.7 sport=43413 dport=80 packets=7 bytes=3067 src=66.135.204.7 dst=xxx.xxx.xxx.21 sport=80 dport=43413 packets=4 bytes=2741 [ASSURED] mark=0 secmark=0 use=1
  1319. tcp 6 411838 ESTABLISHED src=172.16.98.13 dst=172.16.130.20 sport=16050 dport=56583 packets=999 bytes=62905 [UNREPLIED] src=172.16.130.20 dst=172.16.98.13 sport=56583 dport=16050 packets=0 bytes=0 mark=0 secmark=0 use=1
  1320. tcp 6 196230 ESTABLISHED src=172.16.0.9 dst=10.8.0.30 sport=143 dport=55392 packets=1 bytes=65 [UNREPLIED] src=10.8.0.30 dst=172.16.0.9 sport=55392 dport=143 packets=0 bytes=0 mark=0 secmark=0 use=1
  1321. tcp 6 329955 ESTABLISHED src=172.16.99.4 dst=172.16.0.65 sport=60331 dport=80 packets=2 bytes=104 [UNREPLIED] src=172.16.0.65 dst=172.16.99.4 sport=80 dport=60331 packets=0 bytes=0 mark=0 secmark=0 use=1
  1322. tcp 6 251766 ESTABLISHED src=172.16.99.4 dst=172.16.0.65 sport=45177 dport=80 packets=2 bytes=104 [UNREPLIED] src=172.16.0.65 dst=172.16.99.4 sport=80 dport=45177 packets=0 bytes=0 mark=0 secmark=0 use=1
  1323. udp 17 19 src=172.16.44.14 dst=172.16.255.255 sport=138 dport=138 packets=1 bytes=229 [UNREPLIED] src=172.16.255.255 dst=172.16.44.14 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=1
  1324. tcp 6 51 TIME_WAIT src=172.16.33.4 dst=188.72.250.210 sport=54173 dport=80 packets=7 bytes=2134 src=188.72.250.210 dst=xxx.xxx.xxx.21 sport=80 dport=54173 packets=9 bytes=7046 [ASSURED] mark=0 secmark=0 use=1
  1325. udp 17 29 src=xxx.xxx.xxx.18 dst=87.106.252.163 sport=55707 dport=53 packets=1 bytes=73 src=87.106.252.163 dst=xxx.xxx.xxx.18 sport=53 dport=55707 packets=1 bytes=73 mark=0 secmark=0 use=1
  1326. tcp 6 431886 ESTABLISHED src=172.16.99.9 dst=66.102.13.102 sport=38298 dport=80 packets=9 bytes=4687 src=66.102.13.102 dst=xxx.xxx.xxx.21 sport=80 dport=38298 packets=6 bytes=2978 [ASSURED] mark=0 secmark=0 use=1
  1327. tcp 6 92 TIME_WAIT src=172.16.44.14 dst=141.6.2.171 sport=55933 dport=80 packets=6 bytes=771 src=141.6.2.171 dst=xxx.xxx.xxx.21 sport=80 dport=55933 packets=5 bytes=316 [ASSURED] mark=0 secmark=0 use=1
  1328. tcp 6 59536 ESTABLISHED src=172.16.0.62 dst=172.16.0.65 sport=57996 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.0.62 sport=80 dport=57996 packets=0 bytes=0 mark=0 secmark=0 use=1
  1329. tcp 6 14 TIME_WAIT src=172.16.99.25 dst=209.85.148.104 sport=54407 dport=80 packets=8 bytes=2638 src=209.85.148.104 dst=xxx.xxx.xxx.21 sport=80 dport=54407 packets=7 bytes=4159 [ASSURED] mark=0 secmark=0 use=1
  1330. tcp 6 431094 ESTABLISHED src=172.16.98.15 dst=172.16.0.9 sport=42701 dport=143 packets=129 bytes=13993 src=172.16.0.9 dst=172.16.98.15 sport=143 dport=42701 packets=111 bytes=43960 [ASSURED] mark=0 secmark=0 use=1
  1331. tcp 6 330292 ESTABLISHED src=172.16.99.41 dst=172.16.0.65 sport=56390 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.41 sport=80 dport=56390 packets=0 bytes=0 mark=0 secmark=0 use=1
  1332. tcp 6 242627 ESTABLISHED src=172.16.0.7 dst=172.16.0.75 sport=53941 dport=389 packets=6 bytes=2340 [UNREPLIED] src=172.16.0.75 dst=172.16.0.7 sport=389 dport=53941 packets=0 bytes=0 mark=0 secmark=0 use=1
  1333. tcp 6 431887 ESTABLISHED src=172.16.33.4 dst=195.27.183.168 sport=53936 dport=80 packets=8 bytes=2626 src=195.27.183.168 dst=xxx.xxx.xxx.21 sport=80 dport=53936 packets=6 bytes=1720 [ASSURED] mark=0 secmark=0 use=1
  1334. tcp 6 87 TIME_WAIT src=172.16.99.5 dst=209.85.148.147 sport=34991 dport=80 packets=5 bytes=268 src=209.85.148.147 dst=xxx.xxx.xxx.21 sport=80 dport=34991 packets=3 bytes=164 [ASSURED] mark=0 secmark=0 use=1
  1335. tcp 6 413829 ESTABLISHED src=172.16.98.13 dst=172.16.130.20 sport=16050 dport=57119 packets=406 bytes=32299 [UNREPLIED] src=172.16.130.20 dst=172.16.98.13 sport=57119 dport=16050 packets=0 bytes=0 mark=0 secmark=0 use=1
  1336. tcp 6 348008 ESTABLISHED src=172.16.99.5 dst=172.16.0.65 sport=58702 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.5 sport=80 dport=58702 packets=0 bytes=0 mark=0 secmark=0 use=1
  1337. tcp 6 260724 ESTABLISHED src=172.16.33.4 dst=172.16.0.65 sport=56319 dport=80 packets=1 bytes=40 [UNREPLIED] src=172.16.0.65 dst=172.16.33.4 sport=80 dport=56319 packets=0 bytes=0 mark=0 secmark=0 use=1
  1338. tcp 6 431858 ESTABLISHED src=172.16.98.15 dst=172.16.0.9 sport=38745 dport=143 packets=1201 bytes=80920 src=172.16.0.9 dst=172.16.98.15 sport=143 dport=38745 packets=1043 bytes=458983 [ASSURED] mark=0 secmark=0 use=1
  1339. tcp 6 250978 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=52494 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=52494 packets=0 bytes=0 mark=0 secmark=0 use=1
  1340. udp 17 24 src=xxx.xxx.xxx.18 dst=87.106.252.163 sport=38987 dport=53 packets=1 bytes=73 src=87.106.252.163 dst=xxx.xxx.xxx.18 sport=53 dport=38987 packets=1 bytes=73 mark=0 secmark=0 use=1
  1341. tcp 6 10 TIME_WAIT src=172.16.33.4 dst=199.16.83.72 sport=53982 dport=80 packets=6 bytes=785 src=199.16.83.72 dst=xxx.xxx.xxx.21 sport=80 dport=53982 packets=7 bytes=1786 [ASSURED] mark=0 secmark=0 use=1
  1342. tcp 6 250738 ESTABLISHED src=172.16.99.2 dst=172.16.0.65 sport=46764 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.2 sport=80 dport=46764 packets=0 bytes=0 mark=0 secmark=0 use=1
  1343. tcp 6 330292 ESTABLISHED src=172.16.99.41 dst=172.16.0.65 sport=56388 dport=80 packets=1 bytes=52 [UNREPLIED] src=172.16.0.65 dst=172.16.99.41 sport=80 dport=56388 packets=0 bytes=0 mark=0 secmark=0 use=1
  1344. udp 17 29 src=172.16.99.24 dst=172.16.255.255 sport=17500 dport=17500 packets=1 bytes=247 [UNREPLIED] src=172.16.255.255 dst=172.16.99.24 sport=17500 dport=17500 packets=0 bytes=0 mark=0 secmark=0 use=1
  1345. tcp 6 0 TIME_WAIT src=172.16.33.4 dst=217.72.196.218 sport=53888 dport=80 packets=5 bytes=545 src=217.72.196.218 dst=xxx.xxx.xxx.21 sport=80 dport=53888 packets=5 bytes=793 [ASSURED] mark=0 secmark=0 use=1
  1346. tcp 6 119 TIME_WAIT src=172.16.99.9 dst=209.85.227.102 sport=57672 dport=80 packets=6 bytes=1629 src=209.85.227.102 dst=xxx.xxx.xxx.21 sport=80 dport=57672 packets=4 bytes=1344 [ASSURED] mark=0 secmark=0 use=1
  1347. tcp 6 417784 ESTABLISHED src=172.16.0.9 dst=10.8.0.198 sport=143 dport=40318 packets=1 bytes=77 [UNREPLIED] src=10.8.0.198 dst=172.16.0.9 sport=40318 dport=143 packets=0 bytes=0 mark=0 secmark=0 use=1
  1348. tcp 6 314794 ESTABLISHED src=172.16.0.7 dst=172.16.0.75 sport=16254 dport=389 packets=6 bytes=2340 [UNREPLIED] src=172.16.0.75 dst=172.16.0.7 sport=389 dport=16254 packets=0 bytes=0 mark=0 secmark=0 use=1
  1349. tcp 6 156418 ESTABLISHED src=172.16.99.35 dst=172.16.131.3 sport=42339 dport=3306 packets=3 bytes=228 [UNREPLIED] src=172.16.131.3 dst=172.16.99.35 sport=3306 dport=42339 packets=0 bytes=0 mark=0 secmark=0 use=1
  1350. tcp 6 431931 ESTABLISHED src=172.16.33.4 dst=209.85.148.148 sport=54171 dport=80 packets=4 bytes=549 src=209.85.148.148 dst=xxx.xxx.xxx.21 sport=80 dport=54171 packets=3 bytes=490 [ASSURED] mark=0 secmark=0 use=1
  1351.  
  1352. IP Configuration
  1353.  
  1354. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
  1355. inet 127.0.0.1/8 scope host lo
  1356. 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
  1357. inet xxx.xxx.xxx.18/28 brd xxx.xxx.xxx.31 scope global eth1
  1358. inet xxx.xxx.xxx.20/28 brd xxx.xxx.xxx.31 scope global secondary eth1:2
  1359. inet xxx.xxx.xxx.21/28 brd xxx.xxx.xxx.31 scope global secondary eth1:3
  1360. inet xxx.xxx.xxx.22/28 brd xxx.xxx.xxx.31 scope global secondary eth1:4
  1361. inet xxx.xxx.xxx.19/28 brd xxx.xxx.xxx.31 scope global secondary eth1
  1362. 5: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 100
  1363. inet 192.168.0.1/24 brd 192.168.0.255 scope global eth3
  1364. 7: br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
  1365. inet 172.16.0.2/16 brd 172.16.255.255 scope global br0
  1366. 9: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc prio state UNKNOWN qlen 100
  1367. inet 10.8.0.1 peer 10.8.0.2/32 scope global tun0
  1368.  
  1369. IP Stats
  1370.  
  1371. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
  1372. link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  1373. RX: bytes packets errors dropped overrun mcast
  1374. 9456486 92214 0 0 0 0
  1375. TX: bytes packets errors dropped carrier collsns
  1376. 9456486 92214 0 0 0 0
  1377. 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
  1378. link/ether 00:19:b9:f8:a3:12 brd ff:ff:ff:ff:ff:ff
  1379. RX: bytes packets errors dropped overrun mcast
  1380. 614934847 1526350240 0 0 422 73805641
  1381. TX: bytes packets errors dropped carrier collsns
  1382. 2465439411 1346507310 0 0 0 0
  1383. 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
  1384. link/ether 00:19:b9:f8:a3:13 brd ff:ff:ff:ff:ff:ff
  1385. RX: bytes packets errors dropped overrun mcast
  1386. 1660744232 1392753249 0 0 0 0
  1387. TX: bytes packets errors dropped carrier collsns
  1388. 530667564 1231643249 0 0 0 0
  1389. 4: eth2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
  1390. link/ether 00:15:17:39:d9:9a brd ff:ff:ff:ff:ff:ff
  1391. RX: bytes packets errors dropped overrun mcast
  1392. 0 0 0 0 0 0
  1393. TX: bytes packets errors dropped carrier collsns
  1394. 0 0 0 0 0 0
  1395. 5: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 100
  1396. link/ether 00:15:17:39:d9:9b brd ff:ff:ff:ff:ff:ff
  1397. RX: bytes packets errors dropped overrun mcast
  1398. 3750745634 73479093 0 0 0 0
  1399. TX: bytes packets errors dropped carrier collsns
  1400. 2961264188 48474964 0 0 0 0
  1401. 6: tap0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 100
  1402. link/ether f2:aa:bd:b4:6a:cd brd ff:ff:ff:ff:ff:ff
  1403. RX: bytes packets errors dropped overrun mcast
  1404. 1398561127 265752604 0 0 0 0
  1405. TX: bytes packets errors dropped carrier collsns
  1406. 2709419260 330555738 0 87037 0 0
  1407. 7: br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
  1408. link/ether 00:19:b9:f8:a3:12 brd ff:ff:ff:ff:ff:ff
  1409. RX: bytes packets errors dropped overrun mcast
  1410. 4025747881 968716502 0 0 0 96335972
  1411. TX: bytes packets errors dropped carrier collsns
  1412. 3225995529 1147653610 0 0 0 0
  1413. 9: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc prio state UNKNOWN qlen 100
  1414. link/[65534]
  1415. RX: bytes packets errors dropped overrun mcast
  1416. 102104 1610 0 0 0 0
  1417. TX: bytes packets errors dropped carrier collsns
  1418. 2853464 2444 0 0 0 0
  1419.  
  1420. Bridges
  1421.  
  1422. bridge name bridge id STP enabled interfaces
  1423. br0 8000.0019b9f8a312 no eth0
  1424. tap0
  1425.  
  1426. Per-IP Counters
  1427.  
  1428. iptaccount is not installed
  1429.  
  1430. PFKEY SPD
  1431.  
  1432. (per-socket policy)
  1433. Policy:[Invalid direciton]
  1434. created: Jan 31 18:27:31 2011 lastused: Aug 17 19:46:26 2011
  1435. lifetime: 0(s) validtime: 0(s)
  1436. spid=12 seq=1 pid=29802
  1437. refcnt=1
  1438. (per-socket policy)
  1439. Policy:[Invalid direciton]
  1440. created: Jan 31 18:27:31 2011 lastused: Aug 17 19:46:26 2011
  1441. lifetime: 0(s) validtime: 0(s)
  1442. spid=3 seq=0 pid=29802
  1443. refcnt=1
  1444.  
  1445. PFKEY SAD
  1446.  
  1447. No SAD entries.
  1448.  
  1449. /proc
  1450.  
  1451. /proc/version = Linux version 2.6.28-11-server (buildd@palmer) (gcc version 4.3.3 (Ubuntu 4.3.3-5ubuntu4) ) #42-Ubuntu SMP Fri Apr 17 02:48:10 UTC 2009
  1452. /proc/sys/net/ipv4/ip_forward = 1
  1453. /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
  1454. /proc/sys/net/ipv4/conf/all/proxy_arp = 0
  1455. /proc/sys/net/ipv4/conf/all/arp_filter = 0
  1456. /proc/sys/net/ipv4/conf/all/arp_ignore = 0
  1457. /proc/sys/net/ipv4/conf/all/rp_filter = 1
  1458. /proc/sys/net/ipv4/conf/all/log_martians = 0
  1459. /proc/sys/net/ipv4/conf/br0/proxy_arp = 0
  1460. /proc/sys/net/ipv4/conf/br0/arp_filter = 0
  1461. /proc/sys/net/ipv4/conf/br0/arp_ignore = 0
  1462. /proc/sys/net/ipv4/conf/br0/rp_filter = 0
  1463. /proc/sys/net/ipv4/conf/br0/log_martians = 1
  1464. /proc/sys/net/ipv4/conf/default/proxy_arp = 0
  1465. /proc/sys/net/ipv4/conf/default/arp_filter = 0
  1466. /proc/sys/net/ipv4/conf/default/arp_ignore = 0
  1467. /proc/sys/net/ipv4/conf/default/rp_filter = 0
  1468. /proc/sys/net/ipv4/conf/default/log_martians = 1
  1469. /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
  1470. /proc/sys/net/ipv4/conf/eth0/arp_filter = 0
  1471. /proc/sys/net/ipv4/conf/eth0/arp_ignore = 0
  1472. /proc/sys/net/ipv4/conf/eth0/rp_filter = 0
  1473. /proc/sys/net/ipv4/conf/eth0/log_martians = 1
  1474. /proc/sys/net/ipv4/conf/eth1/proxy_arp = 0
  1475. /proc/sys/net/ipv4/conf/eth1/arp_filter = 0
  1476. /proc/sys/net/ipv4/conf/eth1/arp_ignore = 0
  1477. /proc/sys/net/ipv4/conf/eth1/rp_filter = 0
  1478. /proc/sys/net/ipv4/conf/eth1/log_martians = 1
  1479. /proc/sys/net/ipv4/conf/eth2/proxy_arp = 0
  1480. /proc/sys/net/ipv4/conf/eth2/arp_filter = 0
  1481. /proc/sys/net/ipv4/conf/eth2/arp_ignore = 0
  1482. /proc/sys/net/ipv4/conf/eth2/rp_filter = 0
  1483. /proc/sys/net/ipv4/conf/eth2/log_martians = 1
  1484. /proc/sys/net/ipv4/conf/eth3/proxy_arp = 0
  1485. /proc/sys/net/ipv4/conf/eth3/arp_filter = 0
  1486. /proc/sys/net/ipv4/conf/eth3/arp_ignore = 0
  1487. /proc/sys/net/ipv4/conf/eth3/rp_filter = 0
  1488. /proc/sys/net/ipv4/conf/eth3/log_martians = 1
  1489. /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
  1490. /proc/sys/net/ipv4/conf/lo/arp_filter = 0
  1491. /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
  1492. /proc/sys/net/ipv4/conf/lo/rp_filter = 0
  1493. /proc/sys/net/ipv4/conf/lo/log_martians = 1
  1494. /proc/sys/net/ipv4/conf/tap0/proxy_arp = 0
  1495. /proc/sys/net/ipv4/conf/tap0/arp_filter = 0
  1496. /proc/sys/net/ipv4/conf/tap0/arp_ignore = 0
  1497. /proc/sys/net/ipv4/conf/tap0/rp_filter = 0
  1498. /proc/sys/net/ipv4/conf/tap0/log_martians = 1
  1499. /proc/sys/net/ipv4/conf/tun0/proxy_arp = 0
  1500. /proc/sys/net/ipv4/conf/tun0/arp_filter = 0
  1501. /proc/sys/net/ipv4/conf/tun0/arp_ignore = 0
  1502. /proc/sys/net/ipv4/conf/tun0/rp_filter = 0
  1503. /proc/sys/net/ipv4/conf/tun0/log_martians = 1
  1504.  
  1505. Routing Rules
  1506.  
  1507. 0: from all lookup local
  1508. 32766: from all lookup main
  1509. 32767: from all lookup default
  1510.  
  1511. Table default:
  1512.  
  1513.  
  1514. Table local:
  1515.  
  1516. local xxx.xxx.xxx.18 dev eth1 proto kernel scope host src xxx.xxx.xxx.18
  1517. local xxx.xxx.xxx.19 dev eth1 proto kernel scope host src xxx.xxx.xxx.18
  1518. broadcast 192.168.0.255 dev eth3 proto kernel scope link src 192.168.0.1
  1519. broadcast 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1
  1520. local 10.8.0.1 dev tun0 proto kernel scope host src 10.8.0.1
  1521. local xxx.xxx.xxx.22 dev eth1 proto kernel scope host src xxx.xxx.xxx.18
  1522. broadcast 172.16.0.0 dev br0 proto kernel scope link src 172.16.0.2
  1523. local xxx.xxx.xxx.20 dev eth1 proto kernel scope host src xxx.xxx.xxx.18
  1524. local 172.16.0.2 dev br0 proto kernel scope host src 172.16.0.2
  1525. local xxx.xxx.xxx.21 dev eth1 proto kernel scope host src xxx.xxx.xxx.18
  1526. local 192.168.0.1 dev eth3 proto kernel scope host src 192.168.0.1
  1527. broadcast 192.168.0.0 dev eth3 proto kernel scope link src 192.168.0.1
  1528. broadcast 172.16.255.255 dev br0 proto kernel scope link src 172.16.0.2
  1529. broadcast xxx.xxx.xxx.31 dev eth1 proto kernel scope link src xxx.xxx.xxx.18
  1530. broadcast 127.0.0.0 dev lo proto kernel scope link src 127.0.0.1
  1531. local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1
  1532. local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1
  1533.  
  1534. Table main:
  1535.  
  1536. 10.8.0.2 dev tun0 proto kernel scope link src 10.8.0.1
  1537. xxx.xxx.xxx.16/28 dev eth1 proto kernel scope link src xxx.xxx.xxx.18
  1538. 10.8.0.0/24 via 10.8.0.2 dev tun0
  1539. 192.168.0.0/24 dev eth3 proto kernel scope link src 192.168.0.1
  1540. 172.16.0.0/16 dev br0 proto kernel scope link src 172.16.0.2
  1541. default via xxx.xxx.xxx.17 dev eth1 metric 100
  1542.  
  1543. ARP
  1544.  
  1545. ? (172.16.253.132) at 00:0c:29:dd:85:53 [ether] on br0
  1546. ? (172.16.99.25) at 00:24:e8:40:38:3e [ether] on br0
  1547. ? (172.16.0.5) at 00:1e:c9:d7:dc:d7 [ether] on br0
  1548. ? (172.16.128.20) at 00:0c:29:38:e7:b7 [ether] on br0
  1549. ? (172.16.0.29) at 00:0c:29:ff:94:5b [ether] on br0
  1550. ? (172.16.0.61) at 00:15:5d:fe:04:02 [ether] on br0
  1551. ? (172.16.99.96) at 00:0c:29:e7:8f:dc [ether] on br0
  1552. ? (172.16.33.4) at 00:24:e8:c3:2f:44 [ether] on br0
  1553. ? (172.16.129.7) at 00:15:5d:fe:04:17 [ether] on br0
  1554. ? (xxx.xxx.xxx.17) at 00:0f:90:63:3d:08 [ether] on eth1
  1555. ? (192.168.0.5) at 00:1e:c9:d7:d6:80 [ether] on eth3
  1556. ? (172.16.99.24) at b8:ac:6f:7e:4c:53 [ether] on br0
  1557. ? (172.16.99.5) at bc:30:5b:d1:c7:92 [ether] on br0
  1558. ? (172.16.0.9) at 00:11:43:37:bb:de [ether] on br0
  1559. ? (172.16.0.62) at 00:15:5d:fe:04:03 [ether] on br0
  1560. ? (172.16.30.17) at 00:15:99:2b:9f:5c [ether] on br0
  1561. ? (172.16.99.4) at 00:22:19:30:09:13 [ether] on br0
  1562. ? (172.16.44.14) at 00:1d:09:3c:02:1f [ether] on br0
  1563. ? (172.16.99.51) at 00:22:19:19:54:dd [ether] on br0
  1564. ? (172.16.0.82) at 30:46:9a:fc:80:a7 [ether] on br0
  1565. ? (172.16.99.22) at b8:ac:6f:8a:1a:05 [ether] on br0
  1566. ? (172.16.0.27) at 00:0c:29:a7:76:46 [ether] on br0
  1567. ? (172.16.99.41) at 00:19:d1:94:2b:84 [ether] on br0
  1568. ? (172.16.254.12) at 00:26:b9:43:5c:28 [ether] on br0
  1569. ? (172.16.99.2) at 00:24:e8:40:4a:35 [ether] on br0
  1570. ? (172.16.99.3) at a4:ba:db:02:52:01 [ether] on br0
  1571. ? (172.16.0.11) at 00:26:b9:43:61:9e [ether] on br0
  1572. ? (172.16.99.11) at 00:22:19:30:00:c9 [ether] on br0
  1573. ? (172.16.254.10) at 00:50:56:70:d2:85 [ether] on br0
  1574. ? (172.16.0.4) at 00:c0:b7:ca:22:f8 [ether] on br0
  1575. ? (172.16.99.43) at 00:19:d1:94:2b:f3 [ether] on br0
  1576. ? (172.16.99.9) at b8:ac:6f:7e:4c:5c [ether] on br0
  1577. ? (172.16.99.35) at 78:2b:cb:97:c8:59 [ether] on br0
  1578. ? (172.16.131.2) at 00:15:5d:fe:04:19 [ether] on br0
  1579. ? (172.16.0.33) at 00:0c:29:db:af:4f [ether] on br0
  1580. ? (172.16.0.75) at 78:2b:cb:0a:51:1b [ether] on br0
  1581. ? (172.16.66.10) at e8:06:88:cc:99:58 [ether] on br0
  1582. ? (172.16.66.44) at f0:de:f1:49:74:e1 [ether] on br0
  1583.  
  1584. Modules
  1585.  
  1586. iptable_filter 10752 1
  1587. iptable_mangle 10880 1
  1588. iptable_nat 13700 1
  1589. iptable_raw 10240 0
  1590. ip_tables 19472 4 iptable_raw,iptable_nat,iptable_mangle,iptable_filter
  1591. ipt_addrtype 10496 5
  1592. ipt_ah 9728 0
  1593. ipt_CLUSTERIP 14852 0
  1594. ipt_ECN 10496 0
  1595. ipt_ecn 9984 0
  1596. ipt_LOG 13700 26
  1597. ipt_MASQUERADE 10752 2
  1598. ipt_NETMAP 9728 0
  1599. ipt_REDIRECT 9728 0
  1600. ipt_REJECT 11136 4
  1601. ipt_ttl 9728 0
  1602. ipt_TTL 9984 0
  1603. ipt_ULOG 15140 0
  1604. nf_conntrack 72008 30 nf_nat_sip,nf_conntrack_sip,xt_connlimit,ipt_MASQUERADE,ipt_CLUSTERIP,nf_nat_tftp,nf_nat_snmp_basic,nf_nat_pptp,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,nf_conntrack_amanda,nf_conntrack_tftp,nf_conntrack_proto_sctp,nf_conntrack_pptp,nf_conntrack_proto_gre,nf_conntrack_netlink,nf_conntrack_netbios_ns,nf_conntrack_irc,nf_conntrack_h323,nf_conntrack_ftp,xt_helper,xt_conntrack,xt_CONNMARK,xt_connmark,xt_state,iptable_nat,nf_nat,nf_conntrack_ipv4
  1605. nf_conntrack_amanda 11904 1 nf_nat_amanda
  1606. nf_conntrack_ftp 15652 1 nf_nat_ftp
  1607. nf_conntrack_h323 56648 1 nf_nat_h323
  1608. nf_conntrack_ipv4 21388 42 iptable_nat,nf_nat
  1609. nf_conntrack_irc 13220 1 nf_nat_irc
  1610. nf_conntrack_netbios_ns 10496 0
  1611. nf_conntrack_netlink 23936 0
  1612. nf_conntrack_pptp 14212 1 nf_nat_pptp
  1613. nf_conntrack_proto_gre 13572 1 nf_conntrack_pptp
  1614. nf_conntrack_proto_sctp 16264 0
  1615. nf_conntrack_sip 26132 1 nf_nat_sip
  1616. nf_conntrack_tftp 12308 1 nf_nat_tftp
  1617. nf_defrag_ipv4 9984 2 xt_TPROXY,nf_conntrack_ipv4
  1618. nf_nat 25876 12 nf_nat_sip,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,nf_nat_tftp,nf_nat_pptp,nf_nat_proto_gre,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,iptable_nat
  1619. nf_nat_amanda 9984 0
  1620. nf_nat_ftp 10752 0
  1621. nf_nat_h323 14336 0
  1622. nf_nat_irc 10240 0
  1623. nf_nat_pptp 11136 0
  1624. nf_nat_proto_gre 10372 1 nf_nat_pptp
  1625. nf_nat_sip 14976 0
  1626. nf_nat_snmp_basic 16904 0
  1627. nf_nat_tftp 9600 0
  1628. nf_tproxy_core 10752 1 xt_TPROXY,[permanent]
  1629. xt_CLASSIFY 9600 0
  1630. xt_comment 9600 20
  1631. xt_connlimit 11912 0
  1632. xt_connmark 10240 0
  1633. xt_CONNMARK 10880 0
  1634. xt_conntrack 11776 38
  1635. xt_dccp 11016 0
  1636. xt_dscp 10496 0
  1637. xt_DSCP 11264 0
  1638. xt_hashlimit 18448 0
  1639. xt_helper 10112 1
  1640. xt_iprange 10496 0
  1641. xt_length 9856 0
  1642. xt_limit 10116 0
  1643. xt_mac 9600 243
  1644. xt_MARK 10112 2
  1645. xt_mark 9856 0
  1646. xt_multiport 11264 18
  1647. xt_NFLOG 9728 0
  1648. xt_NFQUEUE 9856 0
  1649. xt_owner 10624 0
  1650. xt_physdev 10384 0
  1651. xt_pkttype 9728 0
  1652. xt_policy 11008 0
  1653. xt_realm 9600 0
  1654. xt_recent 17308 0
  1655. xt_state 10112 0
  1656. xt_tcpmss 10112 0
  1657. xt_TCPMSS 12032 1
  1658. xt_tcpudp 11008 41
  1659. xt_time 10752 0
  1660. xt_TPROXY 10240 0
  1661.  
  1662. Shorewall has detected the following iptables/netfilter capabilities:
  1663. NAT: Available
  1664. Packet Mangling: Available
  1665. Multi-port Match: Available
  1666. Extended Multi-port Match: Available
  1667. Connection Tracking Match: Available
  1668. Extended Connection Tracking Match Support: Available
  1669. Packet Type Match: Available
  1670. Policy Match: Available
  1671. Physdev Match: Available
  1672. Physdev-is-bridged Support: Available
  1673. Packet length Match: Available
  1674. IP range Match: Available
  1675. Recent Match: Available
  1676. Owner Match: Available
  1677. CONNMARK Target: Available
  1678. Extended CONNMARK Target: Available
  1679. Connmark Match: Available
  1680. Extended Connmark Match: Available
  1681. Raw Table: Available
  1682. IPP2P Match: Not available
  1683. CLASSIFY Target: Available
  1684. Extended REJECT: Available
  1685. Repeat match: Available
  1686. MARK Target: Available
  1687. Extended MARK Target: Available
  1688. Extended MARK Target 2: Available
  1689. Mangle FORWARD Chain: Available
  1690. Comments: Available
  1691. Address Type Match: Available
  1692. TCPMSS Match: Available
  1693. Hashlimit Match: Available
  1694. NFQUEUE Target: Available
  1695. Realm Match: Available
  1696. Helper Match: Available
  1697. Connlimit Match: Available
  1698. Time Match: Available
  1699. Goto Support: Available
  1700. LOGMARK Target: Not available
  1701. IPMARK Target: Not available
  1702. LOG Target: Available
  1703. Persistent SNAT: Not available
  1704. TPROXY Target: Not available
  1705. FLOW Classifier: Available
  1706. fwmark route mask: Available
  1707. Mark in any table: Available
  1708. Header Match: Not available
  1709. ACCOUNT Target: Not available
  1710. AUDIT Target: Not available
  1711. ipset V5: Not available
  1712.  
  1713. Active Internet connections (servers and established)
  1714. Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
  1715. tcp 0 0 172.16.0.2:5666 0.0.0.0:* LISTEN 4209/nrpe
  1716. tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 4092/mysqld
  1717. tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 4559/apache2
  1718. tcp 0 0 xxx.xxx.xxx.19:497 0.0.0.0:* LISTEN 4317/retroclient
  1719. tcp 0 0 10.8.0.1:497 0.0.0.0:* LISTEN 4317/retroclient
  1720. tcp 0 0 172.16.0.2:497 0.0.0.0:* LISTEN 4317/retroclient
  1721. tcp 0 0 192.168.0.1:497 0.0.0.0:* LISTEN 4317/retroclient
  1722. tcp 0 0 xxx.xxx.xxx.22:497 0.0.0.0:* LISTEN 4317/retroclient
  1723. tcp 0 0 xxx.xxx.xxx.21:497 0.0.0.0:* LISTEN 4317/retroclient
  1724. tcp 0 0 xxx.xxx.xxx.20:497 0.0.0.0:* LISTEN 4317/retroclient
  1725. tcp 0 0 xxx.xxx.xxx.18:497 0.0.0.0:* LISTEN 4317/retroclient
  1726. tcp 0 0 127.0.0.1:497 0.0.0.0:* LISTEN 4317/retroclient
  1727. tcp 0 0 172.16.0.2:21 0.0.0.0:* LISTEN 26647/openvpn
  1728. tcp 0 0 172.16.0.2:22 0.0.0.0:* LISTEN 2161/sshd
  1729. tcp 0 0 0.0.0.0:3000 0.0.0.0:* LISTEN 19894/ntop
  1730. tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 20117/master
  1731. tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 26647/openvpn
  1732. tcp 0 0 127.0.0.1:3551 0.0.0.0:* LISTEN 4368/apcupsd
  1733. tcp 0 0 172.16.0.2:22 172.16.99.9:36895 ESTABLISHED 28031/sshd: hector
  1734. tcp 0 0 172.16.0.2:22 172.16.99.9:37728 ESTABLISHED 25818/sshd: hector
  1735. tcp 0 0 xxx.xxx.xxx.18:443 194.120.195.122:61487 ESTABLISHED 26647/openvpn
  1736. tcp 0 0 xxx.xxx.xxx.18:443 91.53.35.130:49209 ESTABLISHED 26647/openvpn
  1737. udp 0 0 0.0.0.0:1194 0.0.0.0:* 27834/openvpn
  1738. udp 0 0 0.0.0.0:3052 0.0.0.0:* 4368/apcupsd
  1739. udp 0 0 0.0.0.0:497 0.0.0.0:* 4317/retroclient
  1740. udp 0 0 0.0.0.0:497 0.0.0.0:* 4317/retroclient
  1741. udp 0 0 0.0.0.0:497 0.0.0.0:* 4317/retroclient
  1742. udp 0 0 0.0.0.0:497 0.0.0.0:* 4317/retroclient
  1743. udp 0 0 0.0.0.0:497 0.0.0.0:* 4317/retroclient
  1744. udp 0 0 0.0.0.0:497 0.0.0.0:* 4317/retroclient
  1745. udp 0 0 0.0.0.0:497 0.0.0.0:* 4317/retroclient
  1746. udp 0 0 0.0.0.0:497 0.0.0.0:* 4317/retroclient
  1747. udp 0 0 xxx.xxx.xxx.18:500 0.0.0.0:* 2647/racoon
  1748.  
  1749. Traffic Control
  1750.  
  1751. Device eth0:
  1752. qdisc pfifo_fast 0: root bands 3 priomap 1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
  1753. Sent 1176063125298 bytes 1316951836 pkt (dropped 360682, overlimits 0 requeues 44540)
  1754. rate 0bit 0pps backlog 0b 0p requeues 44540
  1755.  
  1756.  
  1757. Device eth1:
  1758. qdisc pfifo_fast 0: root bands 3 priomap 1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
  1759. Sent 655636067895 bytes 1167594941 pkt (dropped 0, overlimits 0 requeues 8)
  1760. rate 0bit 0pps backlog 0b 0p requeues 8
  1761.  
  1762.  
  1763. Device eth3:
  1764. qdisc pfifo_fast 0: root bands 3 priomap 1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
  1765. Sent 11551198780 bytes 48474964 pkt (dropped 276, overlimits 0 requeues 11589)
  1766. rate 0bit 0pps backlog 0b 0p requeues 11589
  1767.  
  1768.  
  1769. Device tap0:
  1770. qdisc pfifo_fast 0: root bands 3 priomap 1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
  1771. Sent 247562996792 bytes 330642790 pkt (dropped 0, overlimits 0 requeues 0)
  1772. rate 0bit 0pps backlog 0b 0p requeues 0
  1773.  
  1774.  
  1775. Device tun0:
  1776. qdisc prio 1: root bands 3 priomap 1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
  1777. Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
  1778. rate 0bit 0pps backlog 0b 0p requeues 0
  1779. qdisc sfq 11: parent 1:1 limit 127p quantum 1875b flows 127/1024 perturb 10sec
  1780. Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
  1781. rate 0bit 0pps backlog 0b 0p requeues 0
  1782. qdisc sfq 12: parent 1:2 limit 127p quantum 1875b flows 127/1024 perturb 10sec
  1783. Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
  1784. rate 0bit 0pps backlog 0b 0p requeues 0
  1785. qdisc sfq 13: parent 1:3 limit 127p quantum 1875b flows 127/1024 perturb 10sec
  1786. Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
  1787. rate 0bit 0pps backlog 0b 0p requeues 0
  1788.  
  1789. class prio 1:1 parent 1: leaf 11:
  1790. Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
  1791. backlog 0b 0p requeues 0
  1792. class prio 1:2 parent 1: leaf 12:
  1793. Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
  1794. backlog 0b 0p requeues 0
  1795. class prio 1:3 parent 1: leaf 13:
  1796. Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
  1797. backlog 0b 0p requeues 0
  1798.  
  1799.  
  1800. TC Filters
  1801.  
  1802. Device eth0:
  1803.  
  1804. Device eth1:
  1805.  
  1806. Device eth3:
  1807.  
  1808. Device tap0:
  1809.  
  1810. Device tun0:
  1811. filter parent 1: protocol all pref 1 u32
  1812. filter parent 1: protocol all pref 1 u32 fh 800: ht divisor 1
  1813. filter parent 1: protocol all pref 1 u32 fh 800::800 order 2048 key ht 800 bkt 0 flowid 1:1
  1814. match 00060000/00ff0000 at 8
  1815. match 05000000/0f00ffc0 at 0
  1816. match 00100000/00ff0000 at 32
  1817. filter parent 1: protocol all pref 1 u32 fh 800::801 order 2049 key ht 800 bkt 0 flowid 1:1
  1818. match 00000600/0000ff00 at 4
  1819. match 05000000/0f00ffc0 at 0
  1820. match 00100000/00ff0000 at 32
  1821. filter parent 1: protocol all pref 2 fw
  1822. filter parent 1: protocol all pref 2 fw handle 0x1 classid 1:1
  1823. filter parent 1: protocol all pref 2 fw handle 0x2 classid 1:2
  1824. filter parent 1: protocol all pref 2 fw handle 0x3 classid 1:3
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!