Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
- 16:36:26.802459 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 2251084536:2251084652, ack 2296564912, win 731, length 116
- 16:36:26.802474 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 116:168, ack 1, win 731, length 52
- 16:36:26.802487 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 168:284, ack 1, win 731, length 116
- 16:36:26.802497 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 284:336, ack 1, win 731, length 52
- 16:36:26.802718 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 336, win 251, length 0
- 16:36:27.799784 IP server03.dell.local.50990 > server01.dell.local.domain: 53063+ PTR? 24.1.168.192.in-addr.arpa. (43)
- 16:36:27.800297 IP server01.dell.local.domain > server03.dell.local.50990: 53063 NXDomain* 0/1/0 (94)
- 16:36:27.800442 IP server03.dell.local.54649 > server01.dell.local.domain: 9475+ PTR? 43.1.168.192.in-addr.arpa. (43)
- 16:36:27.800851 IP server01.dell.local.domain > server03.dell.local.54649: 9475* 1/1/0 PTR server03.dell.local. (92)
- 16:36:27.801045 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 336:868, ack 1, win 731, length 532
- 16:36:27.801078 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 868:1016, ack 1, win 731, length 148
- 16:36:27.801293 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 1016, win 256, length 0
- 16:36:28.799456 IP server03.dell.local.41593 > server01.dell.local.domain: 3063+ PTR? 41.1.168.192.in-addr.arpa. (43)
- 16:36:28.799930 IP server01.dell.local.domain > server03.dell.local.41593: 3063* 1/1/0 PTR server01.dell.local. (92)
- 16:36:28.800142 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 1016:1404, ack 1, win 731, length 388
- 16:36:28.800176 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 1404:1904, ack 1, win 731, length 500
- 16:36:28.800319 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 1904, win 253, length 0
- 16:36:28.821945 ARP, Request who-has 192.168.1.1 tell 192.168.1.23, length 46
- 16:36:29.789559 IP 192.168.1.23.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
- 16:36:29.790383 IP6 fe80::e5b8:3c0:6c6a:7af9.60085 > ff02::1:3.hostmon: UDP, length 22
- 16:36:29.791938 IP 192.168.1.23.60085 > 224.0.0.252.hostmon: UDP, length 22
- 16:36:29.793496 IP6 fe80::e5b8:3c0:6c6a:7af9.56985 > ff02::1:3.hostmon: UDP, length 22
- 16:36:29.794727 IP 192.168.1.23.56985 > 224.0.0.252.hostmon: UDP, length 22
- 16:36:29.799541 IP server03.dell.local.38290 > server01.dell.local.domain: 30534+ PTR? 1.1.168.192.in-addr.arpa. (42)
- 16:36:29.799618 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 1904:2420, ack 1, win 731, length 516
- 16:36:29.799649 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 2420:2568, ack 1, win 731, length 148
- 16:36:29.800183 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 2568, win 256, length 0
- 16:36:29.800186 IP server01.dell.local.domain > server03.dell.local.38290: 30534 NXDomain* 0/1/0 (93)
- 16:36:29.800321 IP server03.dell.local.59082 > server01.dell.local.domain: 48425+ PTR? 23.1.168.192.in-addr.arpa. (43)
- 16:36:29.800678 IP server01.dell.local.domain > server03.dell.local.59082: 48425 NXDomain* 0/1/0 (94)
- 16:36:29.800826 IP server03.dell.local.58505 > server01.dell.local.domain: 29156+ PTR? 255.1.168.192.in-addr.arpa. (44)
- 16:36:29.800895 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 2568:2700, ack 1, win 731, length 132
- 16:36:29.801318 IP server01.dell.local.domain > server03.dell.local.58505: 29156 NXDomain* 0/1/0 (95)
- 16:36:29.801484 IP server03.dell.local.35339 > server01.dell.local.domain: 21948+ PTR? 3.0.0.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa. (90)
- 16:36:29.801546 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 2700:2864, ack 1, win 731, length 164
- 16:36:29.803968 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 2864, win 255, length 0
- 16:36:30.045105 IP server01.dell.local.domain > server03.dell.local.35339: 21948 NXDomain 0/1/0 (160)
- 16:36:30.045260 IP server03.dell.local.51797 > server01.dell.local.domain: 6584+ PTR? 9.f.a.7.a.6.c.6.0.c.3.0.8.b.5.e.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (90)
- 16:36:30.045768 IP server01.dell.local.domain > server03.dell.local.51797: 6584 NXDomain* 0/1/0 (139)
- 16:36:30.045868 IP server03.dell.local.41435 > server01.dell.local.domain: 32649+ PTR? 252.0.0.224.in-addr.arpa. (42)
- 16:36:30.045918 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 2864:2996, ack 1, win 731, length 132
- 16:36:30.096234 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 2996, win 254, length 0
- 16:36:30.206528 IP6 fe80::e5b8:3c0:6c6a:7af9.60085 > ff02::1:3.hostmon: UDP, length 22
- 16:36:30.210092 IP6 fe80::e5b8:3c0:6c6a:7af9.56985 > ff02::1:3.hostmon: UDP, length 22
- 16:36:30.211394 IP 192.168.1.23.56985 > 224.0.0.252.hostmon: UDP, length 22
- 16:36:30.212608 IP 192.168.1.23.60085 > 224.0.0.252.hostmon: UDP, length 22
- 16:36:30.305661 IP server01.dell.local.domain > server03.dell.local.41435: 32649 NXDomain 0/1/0 (99)
- 16:36:30.305863 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 2996:3112, ack 1, win 731, length 116
- 16:36:30.305895 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 3112:3324, ack 1, win 731, length 212
- 16:36:30.306134 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 3324, win 253, length 0
- 16:36:30.536192 IP 192.168.1.23.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
- 16:36:30.799608 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 3324:3616, ack 1, win 731, length 292
- 16:36:30.799642 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 3616:4116, ack 1, win 731, length 500
- 16:36:30.799663 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 4116:4616, ack 1, win 731, length 500
- 16:36:30.799685 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 4616:5164, ack 1, win 731, length 548
- 16:36:30.799706 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 5164:5712, ack 1, win 731, length 548
- 16:36:30.799727 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 5712:6196, ack 1, win 731, length 484
- 16:36:30.799748 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 6196:6696, ack 1, win 731, length 500
- 16:36:30.799767 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 6696:6860, ack 1, win 731, length 164
- 16:36:30.799823 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 5164, win 256, length 0
- 16:36:30.799826 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 6196, win 252, length 0
- 16:36:30.799829 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 6860, win 256, length 0
- 16:36:31.285474 IP 192.168.1.23.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
- 16:36:31.379170 ARP, Request who-has server03.dell.local (00:15:5d:01:18:06 (oui Unknown)) tell 192.168.1.24, length 28
- 16:36:31.379190 ARP, Reply server03.dell.local is-at 00:15:5d:01:18:06 (oui Unknown), length 28
- 16:36:31.799546 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 6860:7264, ack 1, win 731, length 404
- 16:36:31.799592 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 7264:7796, ack 1, win 731, length 532
- 16:36:31.799618 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 7796:8280, ack 1, win 731, length 484
- 16:36:31.799642 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 8280:8668, ack 1, win 731, length 388
- 16:36:31.799731 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 8280, win 251, length 0
- 16:36:31.799734 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 8668, win 256, length 0
- 16:36:32.799419 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 8668:8832, ack 1, win 731, length 164
- 16:36:32.799456 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 8832:9348, ack 1, win 731, length 516
- 16:36:32.799478 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 9348:9496, ack 1, win 731, length 148
- 16:36:32.799732 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 9496, win 253, length 0
- 16:36:32.809292 ARP, Request who-has server03.dell.local tell server01.dell.local, length 28
- 16:36:32.809313 ARP, Reply server03.dell.local is-at 00:15:5d:01:18:06 (oui Unknown), length 28
- 16:36:33.799450 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 9496:9900, ack 1, win 731, length 404
- 16:36:33.799490 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 9900:10240, ack 1, win 731, length 340
- 16:36:33.799705 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 10240, win 256, length 0
- 16:36:34.799431 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 10240:10404, ack 1, win 731, length 164
- 16:36:34.799467 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 10404:10680, ack 1, win 731, length 276
- 16:36:34.799707 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 10680, win 254, length 0
- 16:36:35.799393 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 10680:10972, ack 1, win 731, length 292
- 16:36:35.799430 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 10972:11120, ack 1, win 731, length 148
- 16:36:35.799645 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 11120, win 253, length 0
- 16:36:36.799382 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 11120:11508, ack 1, win 731, length 388
- 16:36:36.850265 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 11508, win 251, length 0
- 16:36:36.986019 IP 192.168.1.1.1901 > 239.255.255.250.1900: UDP, length 300
- 16:36:36.996045 IP 192.168.1.1.1901 > 239.255.255.250.1900: UDP, length 356
- 16:36:37.006050 IP 192.168.1.1.1901 > 239.255.255.250.1900: UDP, length 284
- 16:36:37.016013 IP 192.168.1.1.1901 > 239.255.255.250.1900: UDP, length 276
- 16:36:37.026136 IP 192.168.1.1.1901 > 239.255.255.250.1900: UDP, length 320
- 16:36:37.035990 IP 192.168.1.1.1901 > 239.255.255.250.1900: UDP, length 296
- 16:36:37.045976 IP 192.168.1.1.1901 > 239.255.255.250.1900: UDP, length 350
- 16:36:37.055991 IP 192.168.1.1.1901 > 239.255.255.250.1900: UDP, length 348
- 16:36:37.066016 IP 192.168.1.1.1901 > 239.255.255.250.1900: UDP, length 352
- 16:36:37.076020 IP 192.168.1.1.1901 > 239.255.255.250.1900: UDP, length 344
- 16:36:37.799488 IP server03.dell.local.60578 > server01.dell.local.domain: 42445+ PTR? 250.255.255.239.in-addr.arpa. (46)
- 16:36:37.799586 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 11508:11784, ack 1, win 731, length 276
- 16:36:37.800115 IP server01.dell.local.domain > server03.dell.local.60578: 42445 NXDomain 0/1/0 (103)
- 16:36:37.800265 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 11784:12060, ack 1, win 731, length 276
- 16:36:37.800295 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 12060:12560, ack 1, win 731, length 500
- 16:36:37.800319 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 12560:12676, ack 1, win 731, length 116
- 16:36:37.800529 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 12676, win 256, length 0
- 16:36:38.799453 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 12676:13064, ack 1, win 731, length 388
- 16:36:38.799489 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 13064:13580, ack 1, win 731, length 516
- 16:36:38.799656 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 13580, win 253, length 0
- 16:36:39.799405 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 13580:13968, ack 1, win 731, length 388
- 16:36:39.849979 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 13968, win 251, length 0
- 16:36:40.799385 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 13968:14132, ack 1, win 731, length 164
- 16:36:40.799423 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 14132:14280, ack 1, win 731, length 148
- 16:36:40.799655 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 14280, win 256, length 0
- 16:36:41.799449 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 14280:14668, ack 1, win 731, length 388
- 16:36:41.849546 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 14668, win 255, length 0
- 16:36:42.799403 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 14668:14944, ack 1, win 731, length 276
- 16:36:42.850487 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 14944, win 254, length 0
- 16:36:43.799877 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 14944:15220, ack 1, win 731, length 276
- 16:36:43.850368 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 15220, win 252, length 0
- 16:36:44.799447 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 15220:15496, ack 1, win 731, length 276
- 16:36:44.849570 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 15496, win 251, length 0
- 16:36:45.799397 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 15496:15772, ack 1, win 731, length 276
- 16:36:45.850723 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 15772, win 256, length 0
- 16:36:46.799431 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 15772:16048, ack 1, win 731, length 276
- 16:36:46.851177 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 16048, win 255, length 0
- 16:36:47.799438 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 16048:16324, ack 1, win 731, length 276
- 16:36:47.849274 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 16324, win 254, length 0
- 16:36:48.799412 IP server03.dell.local.ssh > 192.168.1.24.52794: Flags [P.], seq 16324:16600, ack 1, win 731, length 276
- 16:36:48.849683 IP 192.168.1.24.52794 > server03.dell.local.ssh: Flags [.], ack 16600, win 253, length 0
- ^C
- 129 packets captured
- 132 packets received by filter
- 0 packets dropped by kernel
- shay@server03:/etc$
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement