API tools faq
paste
Advertisement
Guest User

Boost Box Packet capture

a guest
Nov 4th, 2017
464
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.14 KB | None | 0 0
raw download clone embed print report
  1. [2.4.1-RELEASE][admin@router.enuffsaid.local]/root: tcpdump -i em2
  2. tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
  3. listening on em2, link-type EN10MB (Ethernet), capture size 262144 bytes
  4. 13:03:36.068752 IP 10.42.0.2.19936 > 10.42.0.1.domain: 53062+ A? 0.pool.ntp.org. (32)
  5. 13:03:36.079468 IP 10.42.0.1.domain > 10.42.0.2.19936: 53062 4/0/0 A 213.251.53.217, A 217.114.59.3, A 139.162.219.252, A 129.250.35.250 (96)
  6. 13:03:36.182005 IP 10.42.0.2.ntp > 213.251.53.217.ntp: NTPv4, Client, length 48
  7. 13:03:36.194023 IP 213.251.53.217.ntp > 10.42.0.2.ntp: NTPv4, Server, length 48
  8. 13:03:36.381888 IP 10.42.0.2.ntp > ns1.luns.net.uk.ntp: NTPv4, Client, length 48
  9. 13:03:36.398776 IP ns1.luns.net.uk.ntp > 10.42.0.2.ntp: NTPv4, Server, length 48
  10. 13:03:36.581884 IP 10.42.0.2.ntp > ntp.uk.eria.one.ntp: NTPv4, Client, length 48
  11. 13:03:36.594289 IP ntp.uk.eria.one.ntp > 10.42.0.2.ntp: NTPv4, Server, length 48
  12. 13:03:36.781937 IP 10.42.0.2.ntp > x.ns.gin.ntt.net.ntp: NTPv4, Client, length 48
  13. 13:03:41.063199 ARP, Request who-has 10.42.0.1 tell 10.42.0.2, length 46
  14. 13:03:41.063203 ARP, Reply 10.42.0.1 is-at 50:65:f3:21:84:53 (oui Unknown), length 28
  15. 13:04:38.918198 IP 10.42.0.2.ntp > x.ns.gin.ntt.net.ntp: NTPv4, Client, length 48
  16. 13:04:39.118089 IP 10.42.0.2.ntp > ntp.uk.eria.one.ntp: NTPv4, Client, length 48
  17. 13:04:39.130138 IP ntp.uk.eria.one.ntp > 10.42.0.2.ntp: NTPv4, Server, length 48
  18. 13:04:39.318080 IP 10.42.0.2.ntp > ns1.luns.net.uk.ntp: NTPv4, Client, length 48
  19. 13:04:39.336725 IP ns1.luns.net.uk.ntp > 10.42.0.2.ntp: NTPv4, Server, length 48
  20. 13:04:39.517986 IP 10.42.0.2.ntp > 213.251.53.217.ntp: NTPv4, Client, length 48
  21. 13:04:39.530019 IP 213.251.53.217.ntp > 10.42.0.2.ntp: NTPv4, Server, length 48
  22. 13:04:43.912897 ARP, Request who-has 10.42.0.1 tell 10.42.0.2, length 46
  23. 13:04:43.912909 ARP, Reply 10.42.0.1 is-at 50:65:f3:21:84:53 (oui Unknown), length 28
  24. 13:05:41.053185 IP 10.42.0.2.ntp > 213.251.53.217.ntp: NTPv4, Client, length 48
  25. 13:05:41.064599 IP 213.251.53.217.ntp > 10.42.0.2.ntp: NTPv4, Server, length 48
  26. 13:05:41.253042 IP 10.42.0.2.ntp > x.ns.gin.ntt.net.ntp: NTPv4, Client, length 48
  27. 13:05:41.453040 IP 10.42.0.2.ntp > ntp.uk.eria.one.ntp: NTPv4, Client, length 48
  28. 13:05:41.464249 IP ntp.uk.eria.one.ntp > 10.42.0.2.ntp: NTPv4, Server, length 48
  29. 13:05:41.653049 IP 10.42.0.2.ntp > ns1.luns.net.uk.ntp: NTPv4, Client, length 48
  30. 13:05:41.670566 IP ns1.luns.net.uk.ntp > 10.42.0.2.ntp: NTPv4, Server, length 48
  31. 13:05:46.053185 ARP, Request who-has 10.42.0.1 tell 10.42.0.2, length 46
  32. 13:05:46.053189 ARP, Reply 10.42.0.1 is-at 50:65:f3:21:84:53 (oui Unknown), length 28
  33. 13:06:43.286639 IP 10.42.0.2.14327 > 10.42.0.1.domain: 55240+ A? 0.pool.ntp.org. (32)
  34. 13:06:43.296819 IP 10.42.0.1.domain > 10.42.0.2.14327: 55240 4/0/0 A 213.251.53.217, A 139.162.219.252, A 178.62.16.103, A 81.187.65.110 (96)
  35. 13:06:43.399975 IP 10.42.0.2.ntp > 213.251.53.217.ntp: NTPv4, Client, length 48
  36. 13:06:43.411888 IP 213.251.53.217.ntp > 10.42.0.2.ntp: NTPv4, Server, length 48
  37. 13:06:43.599889 IP 10.42.0.2.ntp > ntp.uk.eria.one.ntp: NTPv4, Client, length 48
  38. 13:06:43.613019 IP ntp.uk.eria.one.ntp > 10.42.0.2.ntp: NTPv4, Server, length 48
  39. 13:06:43.799915 IP 10.42.0.2.ntp > ns1.do.steersnet.org.uk.ntp: NTPv4, Client, length 48
  40. 13:06:43.821571 IP ns1.do.steersnet.org.uk.ntp > 10.42.0.2.ntp: NTPv4, Server, length 48
  41. 13:06:43.999884 IP 10.42.0.2.ntp > ns2.martinradford.me.uk.ntp: NTPv4, Client, length 48
  42. 13:06:44.036779 IP ns2.martinradford.me.uk.ntp > 10.42.0.2.ntp: NTPv4, Server, length 48
  43. 13:06:48.282852 ARP, Request who-has 10.42.0.1 tell 10.42.0.2, length 46
  44. 13:06:48.282856 ARP, Reply 10.42.0.1 is-at 50:65:f3:21:84:53 (oui Unknown), length 28
  45. 13:07:22.417638 IP 10.42.0.2.63740 > 10.42.0.1.domain: 35873+ A? fgwkt.ct.ee.co.uk. (35)
  46. 13:07:22.428130 IP 10.42.0.1.domain > 10.42.0.2.63740: 35873 1/0/0 A 194.35.183.255 (51)
  47. 13:07:22.496546 IP 10.42.0.2.sae-urn > 194.35.183.255.sae-urn: NONESP-encap: isakmp: parent_sa ikev2_init[I]
  48. 13:07:22.582696 IP 194.35.183.255.sae-urn > 10.42.0.2.sae-urn: NONESP-encap: isakmp: parent_sa ikev2_init[R]
  49. 13:07:23.242838 IP 10.42.0.2.sae-urn > 194.35.183.255.sae-urn: NONESP-encap: isakmp: child_sa ikev2_auth[I]
  50. 13:07:23.344759 IP 194.35.183.255.sae-urn > 10.42.0.2.sae-urn: NONESP-encap: isakmp: parent_sa inf2
  51. 13:07:26.369775 IP 194.35.183.255.sae-urn > 10.42.0.2.sae-urn: NONESP-encap: isakmp: parent_sa inf2
  52. 13:07:27.412849 ARP, Request who-has 10.42.0.1 tell 10.42.0.2, length 46
  53. 13:07:27.412854 ARP, Reply 10.42.0.1 is-at 50:65:f3:21:84:53 (oui Unknown), length 28
  54. 13:07:28.244347 IP 10.42.0.2.sae-urn > 194.35.183.255.sae-urn: NONESP-encap: isakmp: child_sa ikev2_auth[I]
  55. 13:07:29.377314 IP 194.35.183.255.sae-urn > 10.42.0.2.sae-urn: NONESP-encap: isakmp: parent_sa inf2
  56. 13:07:32.403022 IP 194.35.183.255.sae-urn > 10.42.0.2.sae-urn: NONESP-encap: isakmp: parent_sa inf2
  57. 13:07:33.245595 IP 10.42.0.2.sae-urn > 194.35.183.255.sae-urn: NONESP-encap: isakmp: child_sa ikev2_auth[I]
  58. 13:07:35.422899 IP 194.35.183.255.sae-urn > 10.42.0.2.sae-urn: NONESP-encap: isakmp: parent_sa inf2
  59. 13:07:38.246763 IP 10.42.0.2.sae-urn > 194.35.183.255.sae-urn: NONESP-encap: isakmp: child_sa ikev2_auth[I]
  60. 13:07:38.438863 IP 194.35.183.255.sae-urn > 10.42.0.2.sae-urn: NONESP-encap: isakmp: parent_sa inf2
  61. 13:07:43.247973 IP 10.42.0.2.sae-urn > 194.35.183.255.sae-urn: NONESP-encap: isakmp: child_sa ikev2_auth[I]
  62. 13:07:44.173291 IP 10.42.0.2.ntp > ns2.martinradford.me.uk.ntp: NTPv4, Client, length 48
  63. 13:07:44.209072 IP ns2.martinradford.me.uk.ntp > 10.42.0.2.ntp: NTPv4, Server, length 48
  64. 13:07:44.373166 IP 10.42.0.2.ntp > ns1.do.steersnet.org.uk.ntp: NTPv4, Client, length 48
  65. 13:07:44.386735 IP ns1.do.steersnet.org.uk.ntp > 10.42.0.2.ntp: NTPv4, Server, length 48
  66. 13:07:44.573175 IP 10.42.0.2.ntp > ntp.uk.eria.one.ntp: NTPv4, Client, length 48
  67. 13:07:44.593332 IP ntp.uk.eria.one.ntp > 10.42.0.2.ntp: NTPv4, Server, length 48
  68. 13:07:44.773227 IP 10.42.0.2.ntp > 213.251.53.217.ntp: NTPv4, Client, length 48
  69. 13:07:44.784468 IP 213.251.53.217.ntp > 10.42.0.2.ntp: NTPv4, Server, length 48
  70. 13:07:49.573242 ARP, Request who-has 10.42.0.1 tell 10.42.0.2, length 46
  71. 13:07:49.573248 ARP, Reply 10.42.0.1 is-at 50:65:f3:21:84:53 (oui Unknown), length 28
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!