Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- [root@vpn sysconfig]# tcpdump -nn host 213.145.128.40 and not port 22
- tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
- listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
- 13:23:01.164495 ARP, Request who-has 213.145.128.40 tell 213.145.128.12, length 46
- 13:23:01.171145 IP 213.145.128.40.500 > 213.145.128.100.500: isakmp: phase 1 I ident
- 13:23:01.195011 IP 213.145.128.100.500 > 213.145.128.40.500: isakmp: phase 1 R ident
- 13:23:01.199490 IP 213.145.128.40.500 > 213.145.128.100.500: isakmp: phase 1 I ident
- 13:23:01.204982 IP 213.145.128.100.500 > 213.145.128.40.500: isakmp: phase 1 R ident
- 13:23:01.209071 IP 213.145.128.40.4500 > 213.145.128.100.4500: NONESP-encap: isakmp: phase 1 I ident[E]
- 13:23:01.211025 IP 213.145.128.100.4500 > 213.145.128.40.4500: NONESP-encap: isakmp: phase 1 R ident[E]
- 13:23:01.211873 IP 213.145.128.40.4500 > 213.145.128.100.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E]
- 13:23:01.215259 IP 213.145.128.100.4500 > 213.145.128.40.4500: NONESP-encap: isakmp: phase 2/others R oakley-quick[E]
- 13:23:01.215898 IP 213.145.128.40.4500 > 213.145.128.100.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E]
- 13:23:01.217692 IP 213.145.128.40.4500 > 213.145.128.100.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E]
- 13:23:01.270983 IP 213.145.128.100.4500 > 213.145.128.40.4500: NONESP-encap: isakmp: phase 2/others R oakley-quick[E]
- 13:23:01.271732 IP 213.145.128.40.4500 > 213.145.128.100.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E]
- 13:23:01.271799 IP 213.145.128.40.4500 > 213.145.128.100.4500: NONESP-encap: isakmp: phase 2/others I inf[E]
- 13:23:01.273406 IP 213.145.128.100.4500 > 213.145.128.40.4500: NONESP-encap: isakmp: phase 2/others R inf[E]
- 13:23:04.221966 IP 213.145.128.40.4500 > 213.145.128.100.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E]
- 13:23:04.225352 IP 213.145.128.100.4500 > 213.145.128.40.4500: NONESP-encap: isakmp: phase 2/others R oakley-quick[E]
- 13:23:04.226761 IP 213.145.128.40.4500 > 213.145.128.100.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E]
- 13:23:04.226927 IP 213.145.128.40.4500 > 213.145.128.100.4500: NONESP-encap: isakmp: phase 2/others I inf[E]
- 13:23:04.228437 IP 213.145.128.100.4500 > 213.145.128.40.4500: NONESP-encap: isakmp: phase 2/others R inf[E]
- 13:23:08.222893 IP 213.145.128.40.4500 > 213.145.128.100.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E]
- 13:23:08.226241 IP 213.145.128.100.4500 > 213.145.128.40.4500: NONESP-encap: isakmp: phase 2/others R oakley-quick[E]
- 13:23:08.227503 IP 213.145.128.40.4500 > 213.145.128.100.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E]
- 13:23:08.227740 IP 213.145.128.40.4500 > 213.145.128.100.4500: NONESP-encap: isakmp: phase 2/others I inf[E]
- 13:23:08.230815 IP 213.145.128.100.4500 > 213.145.128.40.4500: NONESP-encap: isakmp: phase 2/others R inf[E]
- 13:23:16.223581 IP 213.145.128.40.4500 > 213.145.128.100.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E]
- 13:23:16.226897 IP 213.145.128.100.4500 > 213.145.128.40.4500: NONESP-encap: isakmp: phase 2/others R oakley-quick[E]
- 13:23:16.228248 IP 213.145.128.40.4500 > 213.145.128.100.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E]
- 13:23:16.228414 IP 213.145.128.40.4500 > 213.145.128.100.4500: NONESP-encap: isakmp: phase 2/others I inf[E]
- 13:23:16.229796 IP 213.145.128.100.4500 > 213.145.128.40.4500: NONESP-encap: isakmp: phase 2/others R inf[E]
- 13:23:20.212440 IP 213.145.128.40.4500 > 213.145.128.100.4500: isakmp-nat-keep-alive
- 13:23:21.205774 IP 213.145.128.100.4500 > 213.145.128.40.4500: isakmp-nat-keep-alive
- 13:23:21.205949 IP 213.145.128.100.4500 > 213.145.128.40.4500: isakmp-nat-keep-alive
- 13:23:26.224289 IP 213.145.128.40.4500 > 213.145.128.100.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E]
- 13:23:26.233503 IP 213.145.128.100.4500 > 213.145.128.40.4500: NONESP-encap: isakmp: phase 2/others R oakley-quick[E]
- 13:23:26.235031 IP 213.145.128.40.4500 > 213.145.128.100.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E]
- 13:23:26.235174 IP 213.145.128.40.4500 > 213.145.128.100.4500: NONESP-encap: isakmp: phase 2/others I inf[E]
- 13:23:26.236589 IP 213.145.128.100.4500 > 213.145.128.40.4500: NONESP-encap: isakmp: phase 2/others R inf[E]
- 13:23:30.897252 ARP, Request who-has 213.145.128.100 (00:50:56:ac:5b:02) tell 213.145.128.40, length 46
- 13:23:30.897266 ARP, Reply 213.145.128.100 is-at 00:50:56:ac:5b:02, length 28
- 13:23:32.206147 IP 213.145.128.40.138 > 213.145.128.255.138: NBT UDP PACKET(138)
- 13:23:36.227378 IP 213.145.128.40.4500 > 213.145.128.100.4500: NONESP-encap: isakmp: phase 2/others I inf[E]
- 13:23:36.228144 IP 213.145.128.100.4500 > 213.145.128.40.4500: NONESP-encap: isakmp: phase 2/others R inf[E]
- 13:23:36.230695 IP 213.145.128.40.4500 > 213.145.128.100.4500: NONESP-encap: isakmp: phase 2/others I inf[E]
- 13:23:36.264072 IP 213.145.128.100.4500 > 213.145.128.40.4500: NONESP-encap: isakmp: phase 2/others R inf[E]
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement