Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- [root@node4 ~]# tcpdump -i br0 | grep -i dhcp
- tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
- listening on br0, link-type EN10MB (Ethernet), capture size 65535 bytes
- 11:00:59.066285 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 52:54:00:76:af:fe (oui Unknown), length 302
- 11:00:59.066597 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 52:54:00:76:af:fe (oui Unknown), length 302
- 11:00:59.066630 IP 192.168.198.2.bootps > 192.168.198.30.bootpc: BOOTP/DHCP, Reply, length 310
- 11:00:59.067447 IP 192.168.198.42.bootps > 192.168.198.101.bootpc: BOOTP/DHCP, Reply, length 300
- [root@node4 ~]# tcpdump -i vnet0 at the same time
- 11:00:59.066240 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 52:54:00:76:af:fe (oui Unknown), length 302
- 11:00:59.066581 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 52:54:00:76:af:fe (oui Unknown), length 302
- 11:01:00.315396 IP6 fe80::225:90ff:fe6d:b990.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
- 11:01:02.390537 IP6 fe80::225:90ff:fe6d:b999.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
- 11:01:02.390615 IP6 fe80::225:90ff:fe6d:b999.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
- 11:01:07.073429 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 52:54:00:76:af:fe (oui Unknown), length 302
- 11:01:07.073615 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 52:54:00:76:af:fe (oui Unknown), length 302
- [root@node4 ~]# iptables -n -L
- Chain INPUT (policy ACCEPT)
- target prot opt source destination
- ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53
- ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53
- ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:67
- ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:67
- ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
- ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0
- ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
- ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22
- REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
- Chain FORWARD (policy ACCEPT)
- target prot opt source destination
- ACCEPT all -- 0.0.0.0/0 192.168.122.0/24 state RELATED,ESTABLISHED
- ACCEPT all -- 192.168.122.0/24 0.0.0.0/0
- ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
- REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
- REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
- ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 PHYSDEV match --physdev-is-bridged
- REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
- Chain OUTPUT (policy ACCEPT)
- target prot opt source destination
Advertisement
Add Comment
Please, Sign In to add comment