Advertisement
Guest User

Untitled

a guest
Apr 15th, 2018
353
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 31.78 KB | None | 0 0
  1. login as: pi
  2. pi@11.0.0.1's password:
  3. Linux raspberrypi 4.9.80-v7+ #1098 SMP Fri Mar 9 19:11:42 GMT 2018 armv7l
  4.  
  5. The programs included with the Debian GNU/Linux system are free software;
  6. the exact distribution terms for each program are described in the
  7. individual files in /usr/share/doc/*/copyright.
  8.  
  9. Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
  10. permitted by applicable law.
  11. Last login: Sun Apr 15 17:57:04 2018 from 11.0.0.254
  12. pi@raspberrypi:~ $
  13. pi@raspberrypi:~ $ sudo tcpdump -nnv -i eth0 icmp
  14. tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes
  15. 18:23:59.828626 IP (tos 0xc0, ttl 64, id 57089, offset 0, flags [none], proto ICMP (1), length 94)
  16. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 74
  17. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  18. 11.0.0.254.1029 > 8.8.8.8.53: 12835+ A? webchat.freenode.net. (38)
  19. 18:23:59.828962 IP (tos 0xc0, ttl 64, id 57090, offset 0, flags [none], proto ICMP (1), length 94)
  20. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.4.4 unreachable, length 74
  21. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  22. 11.0.0.254.1029 > 8.8.4.4.53: 12835+ A? webchat.freenode.net. (38)
  23. 18:23:59.829294 IP (tos 0xc0, ttl 64, id 57091, offset 0, flags [none], proto ICMP (1), length 94)
  24. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 74
  25. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  26. 11.0.0.254.1029 > 8.8.8.8.53: 31086+ A? webchat.freenode.net. (38)
  27. 18:24:04.148595 IP (tos 0xc0, ttl 64, id 57119, offset 0, flags [none], proto ICMP (1), length 76)
  28. 11.0.0.1 > 11.0.0.254: ICMP host 23.221.198.35 unreachable, length 56
  29. IP (tos 0x0, ttl 126, id 7768, offset 0, flags [DF], proto TCP (6), length 48)
  30. 11.0.0.254.50803 > 23.221.198.35.80: Flags [S], cksum 0xa1b9 (correct), seq 3075438932, win 65535, options [mss 1460,nop,nop,sackOK], length 0
  31. 18:24:09.508628 IP (tos 0xc0, ttl 64, id 57444, offset 0, flags [none], proto ICMP (1), length 80)
  32. 11.0.0.1 > 11.0.0.254: ICMP host 23.221.198.19 unreachable, length 60
  33. IP (tos 0x0, ttl 126, id 7771, offset 0, flags [DF], proto TCP (6), length 52)
  34. 11.0.0.254.50804 > 23.221.198.19.80: Flags [S], cksum 0x0b39 (correct), seq 1007376159, win 8192, options [mss 1460,nop,wscale 2,nop,nop,sackOK], length 0
  35. 18:24:09.508939 IP (tos 0xc0, ttl 64, id 57445, offset 0, flags [none], proto ICMP (1), length 80)
  36. 11.0.0.1 > 11.0.0.254: ICMP host 23.221.198.19 unreachable, length 60
  37. IP (tos 0x0, ttl 126, id 7795, offset 0, flags [DF], proto TCP (6), length 52)
  38. 11.0.0.254.50804 > 23.221.198.19.80: Flags [S], cksum 0x0b39 (correct), seq 1007376159, win 8192, options [mss 1460,nop,wscale 2,nop,nop,sackOK], length 0
  39. 18:24:24.468555 IP (tos 0xc0, ttl 64, id 57802, offset 0, flags [none], proto ICMP (1), length 94)
  40. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 74
  41. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  42. 11.0.0.254.1029 > 8.8.8.8.53: 51675+ A? webchat.freenode.net. (38)
  43. 18:24:24.468837 IP (tos 0xc0, ttl 64, id 57803, offset 0, flags [none], proto ICMP (1), length 94)
  44. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.4.4 unreachable, length 74
  45. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  46. 11.0.0.254.1029 > 8.8.4.4.53: 51675+ A? webchat.freenode.net. (38)
  47. 18:24:31.268565 IP (tos 0xc0, ttl 64, id 58262, offset 0, flags [none], proto ICMP (1), length 80)
  48. 11.0.0.1 > 11.0.0.254: ICMP host 104.25.60.112 unreachable, length 60
  49. IP (tos 0x0, ttl 126, id 7870, offset 0, flags [DF], proto TCP (6), length 52)
  50. 11.0.0.254.50806 > 104.25.60.112.80: Flags [S], cksum 0x2491 (correct), seq 4220041134, win 8192, options [mss 1460,nop,wscale 2,nop,nop,sackOK], length 0
  51. 18:24:37.028549 IP (tos 0xc0, ttl 64, id 58661, offset 0, flags [none], proto ICMP (1), length 76)
  52. 11.0.0.1 > 11.0.0.254: ICMP host 104.25.60.112 unreachable, length 56
  53. IP (tos 0x0, ttl 126, id 7922, offset 0, flags [DF], proto TCP (6), length 48)
  54. 11.0.0.254.50805 > 104.25.60.112.80: Flags [S], cksum 0x2138 (correct), seq 1319476213, win 65535, options [mss 1460,nop,nop,sackOK], length 0
  55. 18:24:37.028844 IP (tos 0xc0, ttl 64, id 58662, offset 0, flags [none], proto ICMP (1), length 76)
  56. 11.0.0.1 > 11.0.0.254: ICMP host 104.25.60.112 unreachable, length 56
  57. IP (tos 0x0, ttl 126, id 7923, offset 0, flags [DF], proto TCP (6), length 48)
  58. 11.0.0.254.50806 > 104.25.60.112.80: Flags [S], cksum 0x389a (correct), seq 4220041134, win 8192, options [mss 1460,nop,nop,sackOK], length 0
  59. 18:24:49.028646 IP (tos 0xc0, ttl 64, id 59221, offset 0, flags [none], proto ICMP (1), length 80)
  60. 11.0.0.1 > 11.0.0.254: ICMP host 104.25.59.112 unreachable, length 60
  61. IP (tos 0x0, ttl 126, id 7933, offset 0, flags [DF], proto TCP (6), length 52)
  62. 11.0.0.254.50807 > 104.25.59.112.80: Flags [S], cksum 0x3245 (correct), seq 65643161, win 8192, options [mss 1460,nop,wscale 2,nop,nop,sackOK], length 0
  63. 18:24:49.028837 IP (tos 0xc0, ttl 64, id 59222, offset 0, flags [none], proto ICMP (1), length 80)
  64. 11.0.0.1 > 11.0.0.254: ICMP host 104.25.59.112 unreachable, length 60
  65. IP (tos 0x0, ttl 126, id 7934, offset 0, flags [DF], proto TCP (6), length 52)
  66. 11.0.0.254.50808 > 104.25.59.112.80: Flags [S], cksum 0x67a1 (correct), seq 4294013235, win 8192, options [mss 1460,nop,wscale 2,nop,nop,sackOK], length 0
  67. 18:24:49.029394 IP (tos 0xc0, ttl 64, id 59223, offset 0, flags [none], proto ICMP (1), length 91)
  68. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 71
  69. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 63)
  70. 11.0.0.254.1029 > 8.8.8.8.53: 54854+ A? srv.datagutt1.com. (35)
  71. 18:24:59.268612 IP (tos 0xc0, ttl 64, id 59989, offset 0, flags [none], proto ICMP (1), length 90)
  72. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 70
  73. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 62)
  74. 11.0.0.254.1029 > 8.8.8.8.53: 60893+ A? www.msftncsi.com. (34)
  75. 18:25:02.468544 IP (tos 0xc0, ttl 64, id 59995, offset 0, flags [none], proto ICMP (1), length 88)
  76. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 68
  77. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 60)
  78. 11.0.0.254.1029 > 8.8.8.8.53: 270+ A? isatap.att.net. (32)
  79. 18:25:06.468559 IP (tos 0xc0, ttl 64, id 60055, offset 0, flags [none], proto ICMP (1), length 88)
  80. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 68
  81. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 60)
  82. 11.0.0.254.1029 > 8.8.8.8.53: 270+ A? isatap.att.net. (32)
  83. 18:25:06.468847 IP (tos 0xc0, ttl 64, id 60056, offset 0, flags [none], proto ICMP (1), length 88)
  84. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.4.4 unreachable, length 68
  85. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 60)
  86. 11.0.0.254.1029 > 8.8.4.4.53: 270+ A? isatap.att.net. (32)
  87. 18:25:13.348568 IP (tos 0xc0, ttl 64, id 60355, offset 0, flags [none], proto ICMP (1), length 118)
  88. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 98
  89. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 90)
  90. 11.0.0.254.1029 > 8.8.8.8.53: 32568+ A? sync-612-us-west-2.sync.services.mozilla.com. (62)
  91. 18:25:16.708632 IP (tos 0xc0, ttl 64, id 60679, offset 0, flags [none], proto ICMP (1), length 90)
  92. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 70
  93. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 62)
  94. 11.0.0.254.1029 > 8.8.8.8.53: 6816+ A? dns.msftncsi.com. (34)
  95. 18:25:27.428622 IP (tos 0xc0, ttl 64, id 60792, offset 0, flags [none], proto ICMP (1), length 91)
  96. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 71
  97. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 63)
  98. 11.0.0.254.1029 > 8.8.8.8.53: 38837+ A? srv.datagutt1.com. (35)
  99. 18:25:27.428914 IP (tos 0xc0, ttl 64, id 60793, offset 0, flags [none], proto ICMP (1), length 91)
  100. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.4.4 unreachable, length 71
  101. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 63)
  102. 11.0.0.254.1029 > 8.8.4.4.53: 38837+ A? srv.datagutt1.com. (35)
  103. 18:25:27.429181 IP (tos 0xc0, ttl 64, id 60794, offset 0, flags [none], proto ICMP (1), length 98)
  104. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 78
  105. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 70)
  106. 11.0.0.254.1029 > 8.8.8.8.53: 38345+ A? detectportal.firefox.com. (42)
  107. 18:25:31.028635 IP (tos 0xc0, ttl 64, id 61104, offset 0, flags [none], proto ICMP (1), length 94)
  108. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 74
  109. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  110. 11.0.0.254.1029 > 8.8.8.8.53: 62761+ A? webchat.freenode.net. (38)
  111. 18:25:31.028932 IP (tos 0xc0, ttl 64, id 61105, offset 0, flags [none], proto ICMP (1), length 94)
  112. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.4.4 unreachable, length 74
  113. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  114. 11.0.0.254.1029 > 8.8.4.4.53: 62761+ A? webchat.freenode.net. (38)
  115. 18:25:31.029201 IP (tos 0xc0, ttl 64, id 61106, offset 0, flags [none], proto ICMP (1), length 94)
  116. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 74
  117. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  118. 11.0.0.254.1029 > 8.8.8.8.53: 12301+ A? webchat.freenode.net. (38)
  119. 18:25:35.028627 IP (tos 0xc0, ttl 64, id 61426, offset 0, flags [none], proto ICMP (1), length 94)
  120. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 74
  121. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  122. 11.0.0.254.1029 > 8.8.8.8.53: 23166+ A? webchat.freenode.net. (38)
  123. 18:25:37.226505 IP (tos 0x0, ttl 127, id 8157, offset 0, flags [none], proto ICMP (1), length 60)
  124. 11.0.0.254 > 192.168.1.254: ICMP echo request, id 1, seq 55002, length 40
  125. 18:25:37.236307 IP (tos 0x0, ttl 63, id 57566, offset 0, flags [none], proto ICMP (1), length 60)
  126. 192.168.1.254 > 11.0.0.254: ICMP echo reply, id 1, seq 55002, length 40
  127. 18:25:38.233332 IP (tos 0x0, ttl 127, id 8160, offset 0, flags [none], proto ICMP (1), length 60)
  128. 11.0.0.254 > 192.168.1.254: ICMP echo request, id 1, seq 55003, length 40
  129. 18:25:38.288166 IP (tos 0x0, ttl 63, id 57567, offset 0, flags [none], proto ICMP (1), length 60)
  130. 192.168.1.254 > 11.0.0.254: ICMP echo reply, id 1, seq 55003, length 40
  131. 18:25:39.108640 IP (tos 0xc0, ttl 64, id 61559, offset 0, flags [none], proto ICMP (1), length 94)
  132. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 74
  133. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  134. 11.0.0.254.1029 > 8.8.8.8.53: 23166+ A? webchat.freenode.net. (38)
  135. 18:25:39.108953 IP (tos 0xc0, ttl 64, id 61560, offset 0, flags [none], proto ICMP (1), length 94)
  136. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.4.4 unreachable, length 74
  137. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  138. 11.0.0.254.1029 > 8.8.4.4.53: 23166+ A? webchat.freenode.net. (38)
  139. 18:25:39.109221 IP (tos 0xc0, ttl 64, id 61561, offset 0, flags [none], proto ICMP (1), length 94)
  140. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 74
  141. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  142. 11.0.0.254.1029 > 8.8.8.8.53: 62070+ A? webchat.freenode.net. (38)
  143. 18:25:39.243565 IP (tos 0x0, ttl 127, id 8165, offset 0, flags [none], proto ICMP (1), length 60)
  144. 11.0.0.254 > 192.168.1.254: ICMP echo request, id 1, seq 55004, length 40
  145. 18:25:39.255364 IP (tos 0x0, ttl 63, id 57568, offset 0, flags [none], proto ICMP (1), length 60)
  146. 192.168.1.254 > 11.0.0.254: ICMP echo reply, id 1, seq 55004, length 40
  147. 18:25:39.977201 IP (tos 0xc0, ttl 64, id 61624, offset 0, flags [none], proto ICMP (1), length 94)
  148. 11.0.0.1 > 11.0.0.254: ICMP redirect 8.8.8.8 to host 192.168.1.254, length 74
  149. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  150. 11.0.0.254.1029 > 8.8.8.8.53: 23166+ A? webchat.freenode.net. (38)
  151. 18:25:40.257499 IP (tos 0x0, ttl 127, id 8171, offset 0, flags [none], proto ICMP (1), length 60)
  152. 11.0.0.254 > 192.168.1.254: ICMP echo request, id 1, seq 55005, length 40
  153. 18:25:40.270071 IP (tos 0x0, ttl 63, id 57569, offset 0, flags [none], proto ICMP (1), length 60)
  154. 192.168.1.254 > 11.0.0.254: ICMP echo reply, id 1, seq 55005, length 40
  155. 18:25:43.108636 IP (tos 0xc0, ttl 64, id 61629, offset 0, flags [none], proto ICMP (1), length 94)
  156. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 74
  157. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  158. 11.0.0.254.1029 > 8.8.8.8.53: 23166+ A? webchat.freenode.net. (38)
  159. 18:25:43.108911 IP (tos 0xc0, ttl 64, id 61630, offset 0, flags [none], proto ICMP (1), length 94)
  160. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.4.4 unreachable, length 74
  161. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  162. 11.0.0.254.1029 > 8.8.4.4.53: 23166+ A? webchat.freenode.net. (38)
  163. 18:25:43.109163 IP (tos 0xc0, ttl 64, id 61631, offset 0, flags [none], proto ICMP (1), length 94)
  164. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 74
  165. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  166. 11.0.0.254.1029 > 8.8.8.8.53: 62070+ A? webchat.freenode.net. (38)
  167. 18:25:46.734095 IP (tos 0x0, ttl 127, id 8179, offset 0, flags [none], proto ICMP (1), length 60)
  168. 11.0.0.254 > 8.8.8.8: ICMP echo request, id 1, seq 55009, length 40
  169. 18:25:51.661404 IP (tos 0x0, ttl 127, id 8183, offset 0, flags [none], proto ICMP (1), length 60)
  170. 11.0.0.254 > 8.8.8.8: ICMP echo request, id 1, seq 55010, length 40
  171. 18:25:54.788646 IP (tos 0xc0, ttl 64, id 62460, offset 0, flags [none], proto ICMP (1), length 88)
  172. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 68
  173. IP (tos 0x0, ttl 126, id 8183, offset 0, flags [none], proto ICMP (1), length 60)
  174. 11.0.0.254 > 8.8.8.8: ICMP echo request, id 1, seq 55010, length 40
  175. 18:25:54.788922 IP (tos 0xc0, ttl 64, id 62461, offset 0, flags [none], proto ICMP (1), length 87)
  176. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 67
  177. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 59)
  178. 11.0.0.254.1029 > 8.8.8.8.53: 2638+ A? ncc.avast.com. (31)
  179. 18:25:54.791650 IP (tos 0x0, ttl 127, id 8187, offset 0, flags [none], proto ICMP (1), length 60)
  180. 11.0.0.254 > 8.8.8.8: ICMP echo request, id 1, seq 55010, length 40
  181. 18:25:57.908629 IP (tos 0xc0, ttl 64, id 62521, offset 0, flags [none], proto ICMP (1), length 88)
  182. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 68
  183. IP (tos 0x0, ttl 126, id 8187, offset 0, flags [none], proto ICMP (1), length 60)
  184. 11.0.0.254 > 8.8.8.8: ICMP echo request, id 1, seq 55010, length 40
  185. 18:25:57.912197 IP (tos 0x0, ttl 127, id 8190, offset 0, flags [none], proto ICMP (1), length 60)
  186. 11.0.0.254 > 8.8.8.8: ICMP echo request, id 1, seq 55006, length 40
  187. 18:26:01.028612 IP (tos 0xc0, ttl 64, id 62785, offset 0, flags [none], proto ICMP (1), length 88)
  188. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 68
  189. IP (tos 0x0, ttl 126, id 8190, offset 0, flags [none], proto ICMP (1), length 60)
  190. 11.0.0.254 > 8.8.8.8: ICMP echo request, id 1, seq 55006, length 40
  191. 18:26:01.028877 IP (tos 0xc0, ttl 64, id 62786, offset 0, flags [none], proto ICMP (1), length 94)
  192. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 74
  193. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  194. 11.0.0.254.1029 > 8.8.8.8.53: 33672+ A? webchat.freenode.net. (38)
  195. 18:26:01.029130 IP (tos 0xc0, ttl 64, id 62787, offset 0, flags [none], proto ICMP (1), length 94)
  196. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.4.4 unreachable, length 74
  197. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  198. 11.0.0.254.1029 > 8.8.4.4.53: 33672+ A? webchat.freenode.net. (38)
  199. 18:26:01.115422 IP (tos 0xc0, ttl 64, id 62794, offset 0, flags [none], proto ICMP (1), length 94)
  200. 11.0.0.1 > 11.0.0.254: ICMP redirect 8.8.8.8 to host 192.168.1.254, length 74
  201. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  202. 11.0.0.254.1029 > 8.8.8.8.53: 33672+ A? webchat.freenode.net. (38)
  203. 18:26:02.129640 IP (tos 0xc0, ttl 64, id 62880, offset 0, flags [none], proto ICMP (1), length 94)
  204. 11.0.0.1 > 11.0.0.254: ICMP redirect 8.8.8.8 to host 192.168.1.254, length 74
  205. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  206. 11.0.0.254.1029 > 8.8.8.8.53: 33672+ A? webchat.freenode.net. (38)
  207. 18:26:04.141946 IP (tos 0xc0, ttl 64, id 63026, offset 0, flags [none], proto ICMP (1), length 94)
  208. 11.0.0.1 > 11.0.0.254: ICMP redirect 8.8.8.8 to host 192.168.1.254, length 74
  209. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  210. 11.0.0.254.1029 > 8.8.8.8.53: 33672+ A? webchat.freenode.net. (38)
  211. 18:26:13.748534 IP (tos 0xc0, ttl 64, id 63147, offset 0, flags [none], proto ICMP (1), length 100)
  212. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 80
  213. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 72)
  214. 11.0.0.254.1029 > 8.8.8.8.53: 19904+ A? telemetry.malwarebytes.com. (44)
  215. 18:26:17.268664 IP (tos 0xc0, ttl 64, id 63334, offset 0, flags [none], proto ICMP (1), length 94)
  216. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 74
  217. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  218. 11.0.0.254.1029 > 8.8.8.8.53: 19811+ A? webchat.freenode.net. (38)
  219. 18:26:22.228640 IP (tos 0xc0, ttl 64, id 63370, offset 0, flags [none], proto ICMP (1), length 87)
  220. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 67
  221. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 59)
  222. 11.0.0.254.1029 > 8.8.8.8.53: 2638+ A? ncc.avast.com. (31)
  223. 18:26:22.228956 IP (tos 0xc0, ttl 64, id 63371, offset 0, flags [none], proto ICMP (1), length 87)
  224. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.4.4 unreachable, length 67
  225. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 59)
  226. 11.0.0.254.1029 > 8.8.4.4.53: 2638+ A? ncc.avast.com. (31)
  227. 18:26:23.670701 IP (tos 0x0, ttl 127, id 8239, offset 0, flags [none], proto ICMP (1), length 60)
  228. 11.0.0.254 > 192.168.1.254: ICMP echo request, id 1, seq 55007, length 40
  229. 18:26:23.679115 IP (tos 0x0, ttl 63, id 57570, offset 0, flags [none], proto ICMP (1), length 60)
  230. 192.168.1.254 > 11.0.0.254: ICMP echo reply, id 1, seq 55007, length 40
  231. 18:26:24.671968 IP (tos 0x0, ttl 127, id 8244, offset 0, flags [none], proto ICMP (1), length 60)
  232. 11.0.0.254 > 192.168.1.254: ICMP echo request, id 1, seq 55008, length 40
  233. 18:26:24.677473 IP (tos 0x0, ttl 63, id 57571, offset 0, flags [none], proto ICMP (1), length 60)
  234. 192.168.1.254 > 11.0.0.254: ICMP echo reply, id 1, seq 55008, length 40
  235. 18:26:25.685678 IP (tos 0x0, ttl 127, id 8250, offset 0, flags [none], proto ICMP (1), length 60)
  236. 11.0.0.254 > 192.168.1.254: ICMP echo request, id 1, seq 55010, length 40
  237. 18:26:25.692773 IP (tos 0x0, ttl 63, id 57572, offset 0, flags [none], proto ICMP (1), length 60)
  238. 192.168.1.254 > 11.0.0.254: ICMP echo reply, id 1, seq 55010, length 40
  239. 18:26:26.684259 IP (tos 0x0, ttl 127, id 8256, offset 0, flags [none], proto ICMP (1), length 60)
  240. 11.0.0.254 > 192.168.1.254: ICMP echo request, id 1, seq 55012, length 40
  241. 18:26:26.695686 IP (tos 0x0, ttl 63, id 57573, offset 0, flags [none], proto ICMP (1), length 60)
  242. 192.168.1.254 > 11.0.0.254: ICMP echo reply, id 1, seq 55012, length 40
  243. 18:26:27.348642 IP (tos 0xc0, ttl 64, id 63544, offset 0, flags [none], proto ICMP (1), length 94)
  244. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 74
  245. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  246. 11.0.0.254.1029 > 8.8.8.8.53: 3140+ A? webchat.freenode.net. (38)
  247. 18:26:31.348620 IP (tos 0xc0, ttl 64, id 63704, offset 0, flags [none], proto ICMP (1), length 94)
  248. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 74
  249. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  250. 11.0.0.254.1029 > 8.8.8.8.53: 3140+ A? webchat.freenode.net. (38)
  251. 18:26:34.468645 IP (tos 0xc0, ttl 64, id 63798, offset 0, flags [none], proto ICMP (1), length 89)
  252. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 69
  253. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 61)
  254. 11.0.0.254.1029 > 8.8.8.8.53: 533+ A? play.google.com. (33)
  255. 18:26:39.428629 IP (tos 0xc0, ttl 64, id 64086, offset 0, flags [none], proto ICMP (1), length 94)
  256. 11.0.0.1 > 11.0.0.254: ICMP host 8.8.8.8 unreachable, length 74
  257. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto UDP (17), length 66)
  258. 11.0.0.254.1029 > 8.8.8.8.53: 54144+ A? webchat.freenode.net. (38)
  259. ^C
  260. 71 packets captured
  261. 71 packets received by filter
  262. 0 packets dropped by kernel
  263. pi@raspberrypi:~ $
  264.  
  265.  
  266.  
  267.  
  268.  
  269.  
  270.  
  271.  
  272.  
  273.  
  274.  
  275.  
  276.  
  277.  
  278.  
  279.  
  280.  
  281.  
  282.  
  283.  
  284.  
  285.  
  286. ==============================================================================
  287.  
  288.  
  289.  
  290.  
  291.  
  292.  
  293.  
  294.  
  295.  
  296.  
  297.  
  298.  
  299.  
  300. login as: pi
  301. pi@11.0.0.1's password:
  302. Linux raspberrypi 4.9.80-v7+ #1098 SMP Fri Mar 9 19:11:42 GMT 2018 armv7l
  303.  
  304. The programs included with the Debian GNU/Linux system are free software;
  305. the exact distribution terms for each program are described in the
  306. individual files in /usr/share/doc/*/copyright.
  307.  
  308. Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
  309. permitted by applicable law.
  310. Last login: Sun Apr 15 18:22:40 2018 from 11.0.0.254
  311. pi@raspberrypi:~ $ tcpdump -nnv -i wlan0 icmp
  312. tcpdump: wlan0: You don't have permission to capture on that device
  313. (socket: Operation not permitted)
  314. pi@raspberrypi:~ $ sudo tcpdump -nnv -i wlan0 icmp
  315. tcpdump: wlan0: That device is not up
  316. pi@raspberrypi:~ $ sudo tcpdump -nnv -i wlan0 icmp
  317. tcpdump: listening on wlan0, link-type EN10MB (Ethernet), capture size 262144 bytes
  318. 18:24:48.017575 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 48)
  319. 192.168.1.254 > 192.168.1.135: ICMP echo request, id 204, seq 0, length 28
  320. 18:24:49.028980 IP (tos 0xc0, ttl 64, id 33859, offset 0, flags [none], proto ICMP (1), length 76)
  321. 192.168.1.135 > 192.168.1.254: ICMP host 192.168.1.135 unreachable, length 56
  322. IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto ICMP (1), length 48)
  323. 192.168.1.254 > 192.168.1.135: ICMP echo request, id 204, seq 0, length 28
  324. 18:24:49.029140 IP (tos 0xd0, ttl 64, id 33860, offset 0, flags [none], proto ICMP (1), length 356)
  325. 192.168.1.135 > 192.168.1.254: ICMP host 192.168.1.135 unreachable, length 336
  326. IP (tos 0x10, ttl 127, id 0, offset 0, flags [none], proto UDP (17), length 328)
  327. 192.168.1.254.67 > 192.168.1.135.68: BOOTP/DHCP, Reply, length 300, xid 0x6227984b, secs 9, Flags [none]
  328. Your-IP 192.168.1.135
  329. Client-Ethernet-Address b8:27:eb:0c:48:d3
  330. Vendor-rfc1048 Extensions
  331. Magic Cookie 0x63825363
  332. DHCP-Message Option 53, length 1: Offer
  333. Server-ID Option 54, length 4: 192.168.1.254
  334. Lease-Time Option 51, length 4: 86400
  335. Subnet-Mask Option 1, length 4: 255.255.255.0
  336. Default-Gateway Option 3, length 4: 192.168.1.254
  337. Domain-Name Option 15, length 7: "att.net"
  338. Domain-Name-Server Option 6, length 4: 192.168.1.254
  339. 18:24:49.029270 IP (tos 0xd0, ttl 64, id 33861, offset 0, flags [none], proto ICMP (1), length 356)
  340. 192.168.1.135 > 192.168.1.254: ICMP host 192.168.1.135 unreachable, length 336
  341. IP (tos 0x10, ttl 127, id 0, offset 0, flags [none], proto UDP (17), length 328)
  342. 192.168.1.254.67 > 192.168.1.135.68: BOOTP/DHCP, Reply, length 300, xid 0x6227984b, secs 9, Flags [none]
  343. Your-IP 192.168.1.135
  344. Client-Ethernet-Address b8:27:eb:0c:48:d3
  345. Vendor-rfc1048 Extensions
  346. Magic Cookie 0x63825363
  347. DHCP-Message Option 53, length 1: ACK
  348. Server-ID Option 54, length 4: 192.168.1.254
  349. Lease-Time Option 51, length 4: 86400
  350. Subnet-Mask Option 1, length 4: 255.255.255.0
  351. Default-Gateway Option 3, length 4: 192.168.1.254
  352. Domain-Name Option 15, length 7: "att.net"
  353. Domain-Name-Server Option 6, length 4: 192.168.1.254
  354. tcpdump: pcap_loop: The interface went down
  355. 4 packets captured
  356. 4 packets received by filter
  357. 0 packets dropped by kernel
  358. pi@raspberrypi:~ $ sudo tcpdump -nnv -i wlan0 icmp
  359. tcpdump: wlan0: That device is not up
  360. pi@raspberrypi:~ $ sudo tcpdump -nnv -i wlan0 icmp
  361. tcpdump: listening on wlan0, link-type EN10MB (Ethernet), capture size 262144 bytes
  362. 18:25:23.988779 IP (tos 0xd0, ttl 64, id 36330, offset 0, flags [none], proto ICMP (1), length 356)
  363. 192.168.1.135 > 192.168.1.254: ICMP host 192.168.1.135 unreachable, length 336
  364. IP (tos 0x10, ttl 127, id 0, offset 0, flags [none], proto UDP (17), length 328)
  365. 192.168.1.254.67 > 192.168.1.135.68: BOOTP/DHCP, Reply, length 300, xid 0x44d7b840, secs 8, Flags [none]
  366. Your-IP 192.168.1.135
  367. Client-Ethernet-Address b8:27:eb:0c:48:d3
  368. Vendor-rfc1048 Extensions
  369. Magic Cookie 0x63825363
  370. DHCP-Message Option 53, length 1: Offer
  371. Server-ID Option 54, length 4: 192.168.1.254
  372. Lease-Time Option 51, length 4: 86400
  373. Subnet-Mask Option 1, length 4: 255.255.255.0
  374. Default-Gateway Option 3, length 4: 192.168.1.254
  375. Domain-Name Option 15, length 7: "att.net"
  376. Domain-Name-Server Option 6, length 4: 192.168.1.254
  377. 18:25:23.989086 IP (tos 0xd0, ttl 64, id 36331, offset 0, flags [none], proto ICMP (1), length 356)
  378. 192.168.1.135 > 192.168.1.254: ICMP host 192.168.1.135 unreachable, length 336
  379. IP (tos 0x10, ttl 127, id 0, offset 0, flags [none], proto UDP (17), length 328)
  380. 192.168.1.254.67 > 192.168.1.135.68: BOOTP/DHCP, Reply, length 300, xid 0x44d7b840, secs 8, Flags [none]
  381. Your-IP 192.168.1.135
  382. Client-Ethernet-Address b8:27:eb:0c:48:d3
  383. Vendor-rfc1048 Extensions
  384. Magic Cookie 0x63825363
  385. DHCP-Message Option 53, length 1: ACK
  386. Server-ID Option 54, length 4: 192.168.1.254
  387. Lease-Time Option 51, length 4: 86400
  388. Subnet-Mask Option 1, length 4: 255.255.255.0
  389. Default-Gateway Option 3, length 4: 192.168.1.254
  390. Domain-Name Option 15, length 7: "att.net"
  391. Domain-Name-Server Option 6, length 4: 192.168.1.254
  392. 18:25:37.226789 IP (tos 0x0, ttl 126, id 8157, offset 0, flags [none], proto ICMP (1), length 60)
  393. 192.168.1.135 > 192.168.1.254: ICMP echo request, id 1, seq 55002, length 40
  394. 18:25:37.236062 IP (tos 0x0, ttl 64, id 57566, offset 0, flags [none], proto ICMP (1), length 60)
  395. 192.168.1.254 > 192.168.1.135: ICMP echo reply, id 1, seq 55002, length 40
  396. 18:25:38.233579 IP (tos 0x0, ttl 126, id 8160, offset 0, flags [none], proto ICMP (1), length 60)
  397. 192.168.1.135 > 192.168.1.254: ICMP echo request, id 1, seq 55003, length 40
  398. 18:25:38.287924 IP (tos 0x0, ttl 64, id 57567, offset 0, flags [none], proto ICMP (1), length 60)
  399. 192.168.1.254 > 192.168.1.135: ICMP echo reply, id 1, seq 55003, length 40
  400. 18:25:39.243810 IP (tos 0x0, ttl 126, id 8165, offset 0, flags [none], proto ICMP (1), length 60)
  401. 192.168.1.135 > 192.168.1.254: ICMP echo request, id 1, seq 55004, length 40
  402. 18:25:39.255117 IP (tos 0x0, ttl 64, id 57568, offset 0, flags [none], proto ICMP (1), length 60)
  403. 192.168.1.254 > 192.168.1.135: ICMP echo reply, id 1, seq 55004, length 40
  404. 18:25:40.257743 IP (tos 0x0, ttl 126, id 8171, offset 0, flags [none], proto ICMP (1), length 60)
  405. 192.168.1.135 > 192.168.1.254: ICMP echo request, id 1, seq 55005, length 40
  406. 18:25:40.269825 IP (tos 0x0, ttl 64, id 57569, offset 0, flags [none], proto ICMP (1), length 60)
  407. 192.168.1.254 > 192.168.1.135: ICMP echo reply, id 1, seq 55005, length 40
  408. tcpdump: pcap_loop: The interface went down
  409. 10 packets captured
  410. 10 packets received by filter
  411. 0 packets dropped by kernel
  412. pi@raspberrypi:~ $ sudo tcpdump -nnv -i wlan0 icmp
  413. tcpdump: listening on wlan0, link-type EN10MB (Ethernet), capture size 262144 bytes
  414. 18:26:22.229270 IP (tos 0xd0, ttl 64, id 36982, offset 0, flags [none], proto ICMP (1), length 356)
  415. 192.168.1.135 > 192.168.1.254: ICMP host 192.168.1.135 unreachable, length 336
  416. IP (tos 0x10, ttl 127, id 0, offset 0, flags [none], proto UDP (17), length 328)
  417. 192.168.1.254.67 > 192.168.1.135.68: BOOTP/DHCP, Reply, length 300, xid 0x1c312413, secs 5, Flags [none]
  418. Your-IP 192.168.1.135
  419. Client-Ethernet-Address b8:27:eb:0c:48:d3
  420. Vendor-rfc1048 Extensions
  421. Magic Cookie 0x63825363
  422. DHCP-Message Option 53, length 1: Offer
  423. Server-ID Option 54, length 4: 192.168.1.254
  424. Lease-Time Option 51, length 4: 86400
  425. Subnet-Mask Option 1, length 4: 255.255.255.0
  426. Default-Gateway Option 3, length 4: 192.168.1.254
  427. Domain-Name Option 15, length 7: "att.net"
  428. Domain-Name-Server Option 6, length 4: 192.168.1.254
  429. 18:26:22.229597 IP (tos 0xd0, ttl 64, id 36983, offset 0, flags [none], proto ICMP (1), length 356)
  430. 192.168.1.135 > 192.168.1.254: ICMP host 192.168.1.135 unreachable, length 336
  431. IP (tos 0x10, ttl 127, id 0, offset 0, flags [none], proto UDP (17), length 328)
  432. 192.168.1.254.67 > 192.168.1.135.68: BOOTP/DHCP, Reply, length 300, xid 0x1c312413, secs 5, Flags [none]
  433. Your-IP 192.168.1.135
  434. Client-Ethernet-Address b8:27:eb:0c:48:d3
  435. Vendor-rfc1048 Extensions
  436. Magic Cookie 0x63825363
  437. DHCP-Message Option 53, length 1: ACK
  438. Server-ID Option 54, length 4: 192.168.1.254
  439. Lease-Time Option 51, length 4: 86400
  440. Subnet-Mask Option 1, length 4: 255.255.255.0
  441. Default-Gateway Option 3, length 4: 192.168.1.254
  442. Domain-Name Option 15, length 7: "att.net"
  443. Domain-Name-Server Option 6, length 4: 192.168.1.254
  444. 18:26:23.671004 IP (tos 0x0, ttl 126, id 8239, offset 0, flags [none], proto ICMP (1), length 60)
  445. 192.168.1.135 > 192.168.1.254: ICMP echo request, id 1, seq 55007, length 40
  446. 18:26:23.678866 IP (tos 0x0, ttl 64, id 57570, offset 0, flags [none], proto ICMP (1), length 60)
  447. 192.168.1.254 > 192.168.1.135: ICMP echo reply, id 1, seq 55007, length 40
  448. 18:26:24.672225 IP (tos 0x0, ttl 126, id 8244, offset 0, flags [none], proto ICMP (1), length 60)
  449. 192.168.1.135 > 192.168.1.254: ICMP echo request, id 1, seq 55008, length 40
  450. 18:26:24.677228 IP (tos 0x0, ttl 64, id 57571, offset 0, flags [none], proto ICMP (1), length 60)
  451. 192.168.1.254 > 192.168.1.135: ICMP echo reply, id 1, seq 55008, length 40
  452. 18:26:25.685925 IP (tos 0x0, ttl 126, id 8250, offset 0, flags [none], proto ICMP (1), length 60)
  453. 192.168.1.135 > 192.168.1.254: ICMP echo request, id 1, seq 55010, length 40
  454. 18:26:25.692531 IP (tos 0x0, ttl 64, id 57572, offset 0, flags [none], proto ICMP (1), length 60)
  455. 192.168.1.254 > 192.168.1.135: ICMP echo reply, id 1, seq 55010, length 40
  456. 18:26:26.684501 IP (tos 0x0, ttl 126, id 8256, offset 0, flags [none], proto ICMP (1), length 60)
  457. 192.168.1.135 > 192.168.1.254: ICMP echo request, id 1, seq 55012, length 40
  458. 18:26:26.695445 IP (tos 0x0, ttl 64, id 57573, offset 0, flags [none], proto ICMP (1), length 60)
  459. 192.168.1.254 > 192.168.1.135: ICMP echo reply, id 1, seq 55012, length 40
  460. tcpdump: pcap_loop: The interface went down
  461. 10 packets captured
  462. 10 packets received by filter
  463. 0 packets dropped by kernel
  464. pi@raspberrypi:~ $ ^C
  465. pi@raspberrypi:~ $
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement