API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jun 19th, 2018
214
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 14.25 KB | None | 0 0
raw download clone embed print report
  1. Host (ping initiated from) :
  2.  
  3. [~] arp -d 192.168.42.254
  4. [~]# arp -a
  5. ? (192.168.42.55) at 08:00:27:56:53:86 [ether] on vboxnet0
  6. ? (192.168.42.56) at 08:00:27:63:17:1d [ether] on vboxnet0
  7.  
  8. [root@deezer-unhu ~]# tcpdump -nettti vboxnet0 not port 22
  9. tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
  10. listening on vboxnet0, link-type EN10MB (Ethernet), capture size 262144 bytes
  11. 00:00:00.000000 00:00:5e:00:01:8e > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), length 60: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  12. 00:00:00.000026 00:00:5e:00:01:8e > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), length 60: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  13. 00:00:01.002621 00:00:5e:00:01:8e > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), length 60: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  14. 00:00:00.000029 00:00:5e:00:01:8e > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), length 60: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  15. 00:00:00.581016 00:00:5e:00:01:8e > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), length 60: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  16. 00:00:00.000027 00:00:5e:00:01:8e > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), length 60: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  17. 00:00:01.002934 00:00:5e:00:01:8e > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), length 60: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  18. 00:00:00.000021 00:00:5e:00:01:8e > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), length 60: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  19. 00:00:00.226158 00:00:5e:00:01:8e > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), length 60: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  20. 00:00:00.000026 00:00:5e:00:01:8e > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), length 60: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  21. 00:00:00.403719 0a:00:27:00:00:00 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 192.168.42.254 tell 192.168.42.42, length 28
  22. 00:00:00.000600 00:00:5e:00:01:8e > 0a:00:27:00:00:00, ethertype ARP (0x0806), length 60: Reply 192.168.42.254 is-at 00:00:5e:00:01:8e, length 46
  23. 00:00:00.000029 0a:00:27:00:00:00 > 00:00:5e:00:01:8e, ethertype IPv4 (0x0800), length 98: 192.168.42.42 > 192.168.42.254: ICMP echo request, id 17064, seq 1, length 64
  24. 00:00:00.598347 00:00:5e:00:01:8e > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), length 60: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  25. 00:00:00.000019 00:00:5e:00:01:8e > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), length 60: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  26. 00:00:00.404826 0a:00:27:00:00:00 > 00:00:5e:00:01:8e, ethertype IPv4 (0x0800), length 98: 192.168.42.42 > 192.168.42.254: ICMP echo request, id 17064, seq 2, length 64
  27. 00:00:00.596957 00:00:5e:00:01:8e > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), length 60: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  28. 00:00:00.000019 00:00:5e:00:01:8e > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), length 60: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  29. 00:00:00.587859 00:00:5e:00:01:8e > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), length 60: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  30. 00:00:00.000047 00:00:5e:00:01:8e > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), length 60: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  31. 00:00:01.001930 00:00:5e:00:01:8e > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), length 60: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  32. 00:00:00.000019 00:00:5e:00:01:8e > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), length 60: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  33.  
  34. After ARP reply :
  35.  
  36. [~] arp -d 192.168.42.254
  37. [~]# arp -a
  38. ? (192.168.42.254) at 00:00:5e:00:01:8e [ether] on vboxnet0
  39. ? (192.168.42.55) at 08:00:27:56:53:86 [ether] on vboxnet0
  40. ? (192.168.42.56) at 08:00:27:63:17:1d [ether] on vboxnet0
  41.  
  42. R1 :
  43.  
  44. ~# tcpdump -nettti any not port 22
  45. tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
  46. listening on any, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
  47. 00:00:00.000000 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  48. 00:00:00.000017 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  49. 00:00:01.002709 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  50. 00:00:00.000010 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  51. 00:00:01.002635 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  52. 00:00:00.000011 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  53. 00:00:00.580928 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  54. 00:00:00.000028 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  55. 00:00:01.002962 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  56. 00:00:00.000011 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  57. 00:00:01.002768 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  58. 00:00:00.000010 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  59. 00:00:00.404191 B 0a:00:27:00:00:00 ethertype ARP (0x0806), length 62: Request who-has 192.168.42.254 tell 192.168.42.42, length 46
  60. 00:00:00.000161 B 0a:00:27:00:00:00 ethertype ARP (0x0806), length 62: Request who-has 192.168.42.254 tell 192.168.42.42, length 46
  61. 00:00:00.000028 Out 00:00:5e:00:01:8e ethertype ARP (0x0806), length 44: Reply 192.168.42.254 is-at 00:00:5e:00:01:8e, length 28
  62. 00:00:00.000004 Out 00:00:5e:00:01:8e ethertype ARP (0x0806), length 44: Reply 192.168.42.254 is-at 00:00:5e:00:01:8e, length 28
  63. 00:00:00.598325 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  64. 00:00:00.000018 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  65. 00:00:01.001776 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  66. 00:00:00.000021 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  67. 00:00:00.587793 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  68. 00:00:00.000017 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  69. 00:00:01.001968 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  70. 00:00:00.000009 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  71. 00:00:01.002739 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  72. 00:00:00.000008 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  73. 00:00:00.591127 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  74. 00:00:00.000270 Out 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 56: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  75.  
  76. R2 :
  77.  
  78. ~# tcpdump -nettti any not port 22
  79. tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
  80. listening on any, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
  81. 00:00:00.000000 M 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 62: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  82. 00:00:00.000294 M 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 62: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  83. 00:00:01.002495 M 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 62: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  84. 00:00:00.000189 M 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 62: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  85. 00:00:01.002550 M 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 62: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  86. 00:00:00.000211 M 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 62: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  87. 00:00:01.002570 M 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 62: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  88. 00:00:00.000273 M 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 62: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  89. 00:00:01.002699 M 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 62: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  90. 00:00:00.000304 M 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 62: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  91. 00:00:00.226509 M 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 62: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  92. 00:00:00.000193 M 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 62: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  93. 00:00:00.403694 B 0a:00:27:00:00:00 ethertype ARP (0x0806), length 62: Request who-has 192.168.42.254 tell 192.168.42.42, length 46
  94. 00:00:00.000975 B 0a:00:27:00:00:00 ethertype ARP (0x0806), length 62: Request who-has 192.168.42.254 tell 192.168.42.42, length 46
  95. 00:00:00.597804 M 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 62: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  96. 00:00:00.000243 M 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 62: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  97. 00:00:01.001537 M 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 62: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  98. 00:00:00.000220 M 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 62: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  99. 00:00:01.002658 M 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 62: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  100. 00:00:00.000344 M 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 62: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  101. 00:00:01.001630 M 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 62: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  102. 00:00:00.000285 M 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 62: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  103. 00:00:00.231221 M 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 62: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
  104. 00:00:00.000498 M 00:00:5e:00:01:8e ethertype IPv4 (0x0800), length 62: 192.168.42.55 > 224.0.0.18: VRRPv2, Advertisement, vrid 142, prio 100, authtype simple, intvl 1s, length 20
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!