Guest User

tcpdump -n port not 80

a guest
Nov 17th, 2011
154
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.90 KB | None | 0 0
  1. 21:02:52.357876 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 49
  2. 21:03:01.957524 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 22
  3. 21:03:23.705288 ARP, Request who-has 172.20.0.254 tell 172.20.0.2, length 46
  4. 21:03:23.705299 ARP, Reply 172.20.0.254 is-at 00:50:22:b0:16:0f, length 28
  5. 21:03:28.623414 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 50
  6. 21:03:29.623564 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 39
  7. 21:03:30.623478 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 102
  8. 21:03:31.623858 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 105
  9. =================== AP STARTED =================
  10. 21:04:34.816697 IP 172.20.0.254.1812 > 172.20.0.2.1027: RADIUS, Access Challenge (11), id: 0x00 length: 64
  11. 21:04:34.823993 IP 172.20.0.2.1027 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x01 length: 413
  12. 21:04:34.852478 IP 172.20.0.254.1812 > 172.20.0.2.1027: RADIUS, Access Challenge (11), id: 0x01 length: 1100
  13. 21:04:34.858762 IP 172.20.0.2.1027 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x02 length: 201
  14. 21:04:34.867797 IP 172.20.0.254.1812 > 172.20.0.2.1027: RADIUS, Access Challenge (11), id: 0x02 length: 1096
  15. 21:04:34.874312 IP 172.20.0.2.1027 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x03 length: 201
  16. 21:04:34.881826 IP 172.20.0.254.1812 > 172.20.0.2.1027: RADIUS, Access Challenge (11), id: 0x03 length: 726
  17. 21:04:34.911330 IP 172.20.0.2.1027 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x04 length: 339
  18. 21:04:34.920879 IP 172.20.0.254.1812 > 172.20.0.2.1027: RADIUS, Access Challenge (11), id: 0x04 length: 298
  19. 21:04:34.925268 IP 172.20.0.2.1027 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x05 length: 201
  20. 21:04:34.932274 IP 172.20.0.254.1812 > 172.20.0.2.1027: RADIUS, Access Challenge (11), id: 0x05 length: 101
  21. 21:04:34.937792 IP 172.20.0.2.1027 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x06 length: 275
  22. 21:04:34.951062 IP 172.20.0.254.1812 > 172.20.0.2.1027: RADIUS, Access Challenge (11), id: 0x06 length: 133
  23. 21:04:34.958660 IP 172.20.0.2.1027 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x07 length: 339
  24. 21:04:34.972381 IP 172.20.0.254.1812 > 172.20.0.2.1027: RADIUS, Access Challenge (11), id: 0x07 length: 101
  25. 21:04:35.072629 IP 172.20.0.2.1027 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x08 length: 275
  26. 21:04:38.060051 IP 172.20.0.2.1027 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x08 length: 275
  27. 21:04:38.060257 IP 172.20.0.254.1812 > 172.20.0.2.1027: RADIUS, Access Reject (3), id: 0x08 length: 44
  28. 21:04:40.078901 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 70
  29. 21:04:40.105979 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 81
  30. 21:04:49.718919 IP 172.20.0.2.1028 > 224.0.1.178.3517: UDP, length 16
  31. 21:04:49.719648 00:1f:3b:8b:34:15 > ff:ff:ff:ff:ff:ff Null Supervisory, Receiver not Ready, rcv seq 64, Flags [Poll], length 46
  32. 21:04:49.722138 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 36
  33. 21:04:49.722203 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 82
  34. 21:04:49.760350 IP 172.20.0.2.1029 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x00 length: 190
  35. 21:04:49.767240 IP 172.20.0.254.1812 > 172.20.0.2.1029: RADIUS, Access Challenge (11), id: 0x00 length: 64
  36. 21:04:49.779675 IP 172.20.0.2.1029 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x01 length: 413
  37. 21:04:49.807583 IP 172.20.0.254.1812 > 172.20.0.2.1029: RADIUS, Access Challenge (11), id: 0x01 length: 1100
  38. 21:04:49.814895 IP 172.20.0.2.1029 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x02 length: 201
  39. 21:04:49.822295 IP 172.20.0.254.1812 > 172.20.0.2.1029: RADIUS, Access Challenge (11), id: 0x02 length: 1096
  40. 21:04:49.848246 IP 172.20.0.2.1029 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x03 length: 201
  41. 21:04:49.855286 IP 172.20.0.254.1812 > 172.20.0.2.1029: RADIUS, Access Challenge (11), id: 0x03 length: 726
  42. 21:04:49.898497 IP 172.20.0.2.1029 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x04 length: 339
  43. 21:04:49.907297 IP 172.20.0.254.1812 > 172.20.0.2.1029: RADIUS, Access Challenge (11), id: 0x04 length: 298
  44. 21:04:49.911732 IP 172.20.0.2.1029 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x05 length: 201
  45. 21:04:49.918085 IP 172.20.0.254.1812 > 172.20.0.2.1029: RADIUS, Access Challenge (11), id: 0x05 length: 101
  46. 21:04:49.926756 IP 172.20.0.2.1029 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x06 length: 275
  47. 21:04:49.938873 IP 172.20.0.254.1812 > 172.20.0.2.1029: RADIUS, Access Challenge (11), id: 0x06 length: 133
  48. 21:04:49.952078 IP 172.20.0.2.1029 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x07 length: 339
  49. 21:04:49.965384 IP 172.20.0.254.1812 > 172.20.0.2.1029: RADIUS, Access Challenge (11), id: 0x07 length: 101
  50. 21:04:49.972489 IP 172.20.0.2.1029 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x08 length: 275
  51. 21:04:52.960761 IP 172.20.0.2.1029 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x08 length: 275
  52. 21:04:52.960970 IP 172.20.0.254.1812 > 172.20.0.2.1029: RADIUS, Access Reject (3), id: 0x08 length: 44
  53. 21:04:54.977940 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 70
  54. 21:04:55.004614 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 81
  55. ========================= 2 unsuccessfull attempts =======================
  56. 21:05:51.782168 IP 172.20.0.2.1030 > 224.0.1.178.3517: UDP, length 16
  57. 21:05:51.783507 00:1f:3b:8b:34:15 > ff:ff:ff:ff:ff:ff Null Supervisory, Receiver not Ready, rcv seq 64, Flags [Poll], length 46
  58. 21:05:51.785820 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 82
  59. 21:05:51.812277 IP 172.20.0.2.1031 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x00 length: 190
  60. 21:05:51.817384 IP 172.20.0.254.1812 > 172.20.0.2.1031: RADIUS, Access Challenge (11), id: 0x00 length: 64
  61. 21:05:51.823729 IP 172.20.0.2.1031 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x01 length: 413
  62. 21:05:51.849455 IP 172.20.0.254.1812 > 172.20.0.2.1031: RADIUS, Access Challenge (11), id: 0x01 length: 1100
  63. 21:05:51.853947 IP 172.20.0.2.1031 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x02 length: 201
  64. 21:05:51.859740 IP 172.20.0.254.1812 > 172.20.0.2.1031: RADIUS, Access Challenge (11), id: 0x02 length: 1096
  65. 21:05:51.864341 IP 172.20.0.2.1031 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x03 length: 201
  66. 21:05:51.869806 IP 172.20.0.254.1812 > 172.20.0.2.1031: RADIUS, Access Challenge (11), id: 0x03 length: 726
  67. 21:05:51.903083 IP 172.20.0.2.1031 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x04 length: 339
  68. 21:05:51.910387 IP 172.20.0.254.1812 > 172.20.0.2.1031: RADIUS, Access Challenge (11), id: 0x04 length: 298
  69. 21:05:51.916300 IP 172.20.0.2.1031 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x05 length: 201
  70. 21:05:51.921302 IP 172.20.0.254.1812 > 172.20.0.2.1031: RADIUS, Access Challenge (11), id: 0x05 length: 101
  71. 21:05:51.925961 IP 172.20.0.2.1031 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x06 length: 275
  72. 21:05:51.935541 IP 172.20.0.254.1812 > 172.20.0.2.1031: RADIUS, Access Challenge (11), id: 0x06 length: 133
  73. 21:05:51.943314 IP 172.20.0.2.1031 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x07 length: 339
  74. 21:05:51.953489 IP 172.20.0.254.1812 > 172.20.0.2.1031: RADIUS, Access Challenge (11), id: 0x07 length: 149
  75. 21:05:51.958114 IP 172.20.0.2.1031 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x08 length: 275
  76. 21:05:51.967882 IP 172.20.0.254.1812 > 172.20.0.2.1031: RADIUS, Access Challenge (11), id: 0x08 length: 101
  77. 21:05:51.975295 IP 172.20.0.2.1031 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x09 length: 275
  78. 21:05:51.980579 IP 172.20.0.254.1812 > 172.20.0.2.1031: RADIUS, Access Accept (2), id: 0x09 length: 170
  79. =================== WOW! CONNECTED!!! PASSWORD CORRECT =======
  80. 21:06:39.443421 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 70
  81. 21:06:39.443461 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 81
  82. =================== Disconnected ===================
  83. 21:07:24.878150 IP 172.20.0.2.1032 > 224.0.1.178.3517: UDP, length 16
  84. 21:07:24.878828 00:1f:3b:8b:34:15 > ff:ff:ff:ff:ff:ff Null Supervisory, Receiver not Ready, rcv seq 64, Flags [Poll], length 46
  85. 21:07:24.881443 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 82
  86. 21:07:27.937748 IP 172.20.0.2.1031 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x0a length: 190
  87. 21:07:27.942794 IP 172.20.0.254.1812 > 172.20.0.2.1031: RADIUS, Access Challenge (11), id: 0x0a length: 64
  88. 21:07:27.947139 IP 172.20.0.2.1031 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x0b length: 607
  89. 21:07:27.953151 IP 172.20.0.254.1812 > 172.20.0.2.1031: RADIUS, Access Challenge (11), id: 0x0b length: 209
  90. 21:07:27.957440 IP 172.20.0.2.1031 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x0c length: 260
  91. 21:07:30.951770 IP 172.20.0.2.1031 > 172.20.0.254.1812: RADIUS, Access Request (1), id: 0x0c length: 260
  92. 21:07:30.951970 IP 172.20.0.254.1812 > 172.20.0.2.1031: RADIUS, Access Reject (3), id: 0x0c length: 44
  93. 21:07:32.976709 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 70
  94. 21:07:33.470852 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 81
  95. 21:07:35.393860 IP 172.20.0.2.1033 > 224.0.1.178.3517: UDP, length 16
  96. 21:07:35.397837 00:1f:3b:8b:34:15 > ff:ff:ff:ff:ff:ff Null Supervisory, Receiver not Ready, rcv seq 64, Flags [Poll], length 46
  97. 21:07:35.399049 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 82
  98. 21:07:45.458562 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 70
  99. 21:07:46.016274 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 36
  100. 21:07:46.016329 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 81
  101. =========== Connected with wrong password, 3 ICMPs and disconnect =====
  102. 21:09:39.344084 IP 172.20.0.2.1034 > 224.0.1.178.3517: UDP, length 16
  103. 21:09:39.347145 00:1f:3b:8b:34:15 > ff:ff:ff:ff:ff:ff Null Supervisory, Receiver not Ready, rcv seq 64, Flags [Poll], length 46
  104. 21:09:39.348421 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 82
  105. 21:09:49.391935 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 70
  106. 21:09:49.406169 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 81
  107. ============== retry with WRONG password =========================
  108. 21:10:36.066910 IP 172.20.0.2.1035 > 224.0.1.178.3517: UDP, length 16
  109. 21:10:36.067598 00:1f:3b:8b:34:15 > ff:ff:ff:ff:ff:ff Null Supervisory, Receiver not Ready, rcv seq 64, Flags [Poll], length 46
  110. 21:10:36.068873 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 82
  111. 21:10:46.108610 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 70
  112. 21:10:46.136705 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 81
  113. ================ retry with CORRECT password ==========================
  114. 21:11:30.233502 IP 172.20.0.2.1036 > 224.0.1.178.3517: UDP, length 16
  115. 21:11:30.235650 00:1f:3b:8b:34:15 > ff:ff:ff:ff:ff:ff Null Supervisory, Receiver not Ready, rcv seq 64, Flags [Poll], length 46
  116. 21:11:30.236927 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 82
  117. 21:11:40.297220 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 70
  118. 21:11:42.678189 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 81
  119. ==================== retry #2 with CORRECT password ===========================
  120. 21:12:17.956293 IP 172.20.0.2.1037 > 224.0.1.178.3517: UDP, length 16
  121. 21:12:17.959210 00:1f:3b:8b:34:15 > ff:ff:ff:ff:ff:ff Null Supervisory, Receiver not Ready, rcv seq 64, Flags [Poll], length 46
  122. 21:12:17.960505 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 82
  123. 21:12:28.001343 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 70
  124. 21:12:28.009171 IP 172.20.0.2.1025 > 172.20.0.254.514: SYSLOG user.notice, length: 81
  125. ====================== retry # 2 with WRONG password ===================
  126.  
  127.  
Add Comment
Please, Sign In to add comment