[Chilli] Hotspot Login on Mobile Phones
Вячеслав Адаманов
adamanov at gmail.com
Tue Nov 17 08:27:58 UTC 2009
with verbose.
2009/11/15 Rakotomandimby Mihamina <mihamina at gulfsat.mg>
11/15/2009 03:03 AM, Вячеслав Адаманов::
>
> tcpdump ipod touch. don't work after release
>>
>
> --verbose
>
>
> --
> Architecte Informatique chez Blueline/Gulfsat:
> Administration Systeme, Recherche & Developpement
> +261 33 11 207 36
> _______________________________________________
> Chilli mailing list
> Chilli at coova.org
> http://lists.coova.org/cgi-bin/mailman/listinfo/chilli
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.coova.org/pipermail/chilli/attachments/20091117/7d64d532/attachment-0001.htm>
-------------- next part --------------
root at wnas:~# tcpdump -s 1500 -vvv -n -i ath0 host 10.1.1.40
tcpdump: WARNING: ath0: no IPv4 address assigned
tcpdump: listening on ath0, link-type EN10MB (Ethernet), capture size 1500 bytes
00:55:12.924742 ARP, Ethernet (len 6), IPv4 (len 4), Reply 10.1.0.1 is-at 00:0c:42:61:44:a2, length 28
00:55:12.940662 ARP, Ethernet (len 6), IPv4 (len 4), Reply 10.1.0.1 is-at 00:0c:42:61:44:a2, length 28
00:55:12.970186 ARP, Ethernet (len 6), IPv4 (len 4), Reply 10.1.0.1 is-at 00:0c:42:61:44:a2, length 28
00:55:13.030076 IP (tos 0x0, ttl 16, id 0, offset 0, flags [none], proto UDP (17), length 327)
10.1.0.1.67 > 10.1.1.40.68: [udp sum ok] BOOTP/DHCP, Reply, length 299, xid 0xa9ec73be, Flags [none] (0x0000)
Your-IP 10.1.1.40
Client-Ethernet-Address 00:1d:4f:ac:36:dd
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message Option 53, length 1: Offer
Subnet-Mask Option 1, length 4: 255.255.255.255
Static-Route Option 33, length 8: (10.1.0.1:10.1.1.40)
Default-Gateway Option 3, length 4: 10.1.0.1
Domain-Name-Server Option 6, length 8: 10.1.0.1,10.1.0.1
Domain-Name Option 15, length 9: "coova.org"
Lease-Time Option 51, length 4: 100
Server-ID Option 54, length 4: 10.1.0.1
END Option 255, length 0
00:55:14.142829 IP (tos 0x0, ttl 16, id 0, offset 0, flags [none], proto UDP (17), length 331)
10.1.0.1.67 > 10.1.1.40.68: [udp sum ok] BOOTP/DHCP, Reply, length 303, xid 0xa9ec73be, Flags [none] (0x0000)
Your-IP 10.1.1.40
Client-Ethernet-Address 00:1d:4f:ac:36:dd
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message Option 53, length 1: ACK
Subnet-Mask Option 1, length 4: 255.255.255.255
Static-Route Option 33, length 8: (10.1.0.1:10.1.1.40)
Default-Gateway Option 3, length 4: 10.1.0.1
Domain-Name-Server Option 6, length 8: 10.1.0.1,10.1.0.1
Domain-Name Option 15, length 9: "coova.org"
Lease-Time Option 51, length 4: 100
MTU Option 26, length 2: 1500
Server-ID Option 54, length 4: 10.1.0.1
END Option 255, length 0
00:55:15.068069 IP (tos 0x0, ttl 16, id 0, offset 0, flags [none], proto UDP (17), length 331)
10.1.0.1.67 > 10.1.1.40.68: [udp sum ok] BOOTP/DHCP, Reply, length 303, xid 0xa9ec73be, Flags [none] (0x0000)
Your-IP 10.1.1.40
Client-Ethernet-Address 00:1d:4f:ac:36:dd
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message Option 53, length 1: ACK
Subnet-Mask Option 1, length 4: 255.255.255.255
Static-Route Option 33, length 8: (10.1.0.1:10.1.1.40)
Default-Gateway Option 3, length 4: 10.1.0.1
Domain-Name-Server Option 6, length 8: 10.1.0.1,10.1.0.1
Domain-Name Option 15, length 9: "coova.org"
Lease-Time Option 51, length 4: 100
MTU Option 26, length 2: 1500
Server-ID Option 54, length 4: 10.1.0.1
END Option 255, length 0
00:55:15.075274 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.1.1.40 tell 0.0.0.0, length 28
00:55:15.477424 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.1.1.40 tell 0.0.0.0, length 28
00:55:15.877502 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.1.1.40 tell 0.0.0.0, length 28
00:55:16.278751 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.1.1.40 tell 10.1.1.40, length 28
00:55:16.682307 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.1.1.40 tell 10.1.1.40, length 28
00:55:16.686447 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.1.0.1 tell 10.1.1.40, length 28
00:55:16.686662 ARP, Ethernet (len 6), IPv4 (len 4), Reply 10.1.0.1 is-at 00:0c:42:61:44:a2, length 28
00:55:16.694013 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 169.254.255.255 tell 10.1.1.40, length 28
00:55:17.132824 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 169.254.255.255 tell 10.1.1.40, length 28
00:55:17.142657 IP (tos 0x0, ttl 1, id 18183, offset 0, flags [none], proto IGMP (2), length 32, options (RA))
10.1.1.40 > 224.0.0.2: igmp leave 224.0.0.251
00:55:17.146986 IP (tos 0x0, ttl 1, id 17787, offset 0, flags [none], proto IGMP (2), length 32, options (RA))
10.1.1.40 > 224.0.0.251: igmp v2 report 224.0.0.251
00:55:17.534262 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 169.254.255.255 tell 10.1.1.40, length 28
00:55:17.935586 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 169.254.255.255 tell 10.1.1.40, length 28
00:55:22.140458 IP (tos 0x0, ttl 255, id 40468, offset 0, flags [none], proto UDP (17), length 183)
10.1.1.40.5353 > 224.0.0.251.5353: [udp sum ok] 0 [3q] [3n] [1au] ANY (QU)? iPodik._ssh._tcp.local. ANY (QU)? iPodik._sftp-ssh._tcp.local. ANY (QU)? iPodik.local. ns: iPodik._ssh._tcp.local. [2m] SRV iPodik.local.:22 0 0, iPodik._sftp-ssh._tcp.local. [2m] SRV iPodik.local.:22 0 0, iPodik.local. [2m] A 10.1.1.40 ar: . OPT UDPsize=1440 (155)
00:55:22.397468 IP (tos 0x0, ttl 255, id 57178, offset 0, flags [none], proto UDP (17), length 183)
10.1.1.40.5353 > 224.0.0.251.5353: [udp sum ok] 0 [3q] [3n] [1au] ANY (QM)? iPodik._ssh._tcp.local. ANY (QM)? iPodik._sftp-ssh._tcp.local. ANY (QM)? iPodik.local. ns: iPodik._ssh._tcp.local. [2m] SRV iPodik.local.:22 0 0, iPodik._sftp-ssh._tcp.local. [2m] SRV iPodik.local.:22 0 0, iPodik.local. [2m] A 10.1.1.40 ar: . OPT UDPsize=1440 (155)
00:55:22.654865 IP (tos 0x0, ttl 255, id 8707, offset 0, flags [none], proto UDP (17), length 183)
10.1.1.40.5353 > 224.0.0.251.5353: [udp sum ok] 0 [3q] [3n] [1au] ANY (QM)? iPodik._ssh._tcp.local. ANY (QM)? iPodik._sftp-ssh._tcp.local. ANY (QM)? iPodik.local. ns: iPodik._ssh._tcp.local. [2m] SRV iPodik.local.:22 0 0, iPodik._sftp-ssh._tcp.local. [2m] SRV iPodik.local.:22 0 0, iPodik.local. [2m] A 10.1.1.40 ar: . OPT UDPsize=1440 (155)
00:55:22.899381 IP (tos 0x0, ttl 255, id 62321, offset 0, flags [none], proto UDP (17), length 328)
10.1.1.40.5353 > 224.0.0.251.5353: [udp sum ok] 0*- [0q] 11/0/0 iPodik._ssh._tcp.local. (Cache flush) [2m] SRV iPodik.local.:22 0 0, iPodik._ssh._tcp.local. (Cache flush) [1h15m] TXT "", _services._dns-sd._udp.local. [1h15m] PTR _ssh._tcp.local., _ssh._tcp.local. [1h15m] PTR iPodik._ssh._tcp.local., iPodik._device-info._tcp.local. [1h15m] TXT "model=Device", iPodik._sftp-ssh._tcp.local. (Cache flush) [2m] SRV iPodik.local.:22 0 0, iPodik._sftp-ssh._tcp.local. (Cache flush) [1h15m] TXT "", _services._dns-sd._udp.local. [1h15m] PTR _sftp-ssh._tcp.local., _sftp-ssh._tcp.local. [1h15m] PTR iPodik._sftp-ssh._tcp.local., iPodik.local. (Cache flush) [2m] A 10.1.1.40, 40.1.1.10.in-addr.arpa. (Cache flush) [2m] PTR iPodik.local. (300)
00:55:23.914877 IP (tos 0x0, ttl 255, id 37392, offset 0, flags [none], proto UDP (17), length 328)
10.1.1.40.5353 > 224.0.0.251.5353: [udp sum ok] 0*- [0q] 11/0/0 iPodik._ssh._tcp.local. (Cache flush) [2m] SRV iPodik.local.:22 0 0, iPodik._ssh._tcp.local. (Cache flush) [1h15m] TXT "", _services._dns-sd._udp.local. [1h15m] PTR _ssh._tcp.local., _ssh._tcp.local. [1h15m] PTR iPodik._ssh._tcp.local., iPodik._device-info._tcp.local. [1h15m] TXT "model=Device", iPodik._sftp-ssh._tcp.local. (Cache flush) [2m] SRV iPodik.local.:22 0 0, iPodik._sftp-ssh._tcp.local. (Cache flush) [1h15m] TXT "", _services._dns-sd._udp.local. [1h15m] PTR _sftp-ssh._tcp.local., _sftp-ssh._tcp.local. [1h15m] PTR iPodik._sftp-ssh._tcp.local., iPodik.local. (Cache flush) [2m] A 10.1.1.40, 40.1.1.10.in-addr.arpa. (Cache flush) [2m] PTR iPodik.local. (300)
00:55:24.627494 IP (tos 0x0, ttl 1, id 1538, offset 0, flags [none], proto IGMP (2), length 32, options (RA))
10.1.1.40 > 224.0.0.251: igmp v2 report 224.0.0.251
00:55:25.898703 IP (tos 0x0, ttl 255, id 10576, offset 0, flags [none], proto UDP (17), length 104)
10.1.1.40.5353 > 224.0.0.251.5353: [udp sum ok] 0*- [0q] 2/0/0 iPodik.local. (Cache flush) [2m] A 10.1.1.40, 40.1.1.10.in-addr.arpa. (Cache flush) [2m] PTR iPodik.local. (76)
00:55:29.898538 IP (tos 0x0, ttl 255, id 54276, offset 0, flags [none], proto UDP (17), length 104)
10.1.1.40.5353 > 224.0.0.251.5353: [udp sum ok] 0*- [0q] 2/0/0 iPodik.local. (Cache flush) [2m] A 10.1.1.40, 40.1.1.10.in-addr.arpa. (Cache flush) [2m] PTR iPodik.local. (76)
00:55:37.898666 IP (tos 0x0, ttl 255, id 3946, offset 0, flags [none], proto UDP (17), length 104)
10.1.1.40.5353 > 224.0.0.251.5353: [udp sum ok] 0*- [0q] 2/0/0 iPodik.local. (Cache flush) [2m] A 10.1.1.40, 40.1.1.10.in-addr.arpa. (Cache flush) [2m] PTR iPodik.local. (76)
00:55:39.407164 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.1.0.1 tell 10.1.1.40, length 28
00:55:39.407407 ARP, Ethernet (len 6), IPv4 (len 4), Reply 10.1.0.1 is-at 00:0c:42:61:44:a2, length 28
00:55:39.409654 IP (tos 0x0, ttl 255, id 43383, offset 0, flags [none], proto UDP (17), length 69)
10.1.1.40.58501 > 91.192.159.1.53: [udp sum ok] 13819+ A? configuration.apple.com. (41)
00:55:39.414807 IP (tos 0x0, ttl 61, id 2572, offset 0, flags [none], proto UDP (17), length 326)
91.192.159.1.53 > 10.1.1.40.58501: [udp sum ok] 13819 q: A? configuration.apple.com. 1/6/6 configuration.apple.com. [20m39s] A 17.250.248.105 ns: apple.com. [3d22h26m2s] NS nserver2.apple.com., apple.com. [3d22h26m2s] NS nserver.apple.com., apple.com. [3d22h26m2s] NS nserver4.apple.com., apple.com. [3d22h26m2s] NS nserver3.apple.com., apple.com. [3d22h26m2s] NS nserver.asia.apple.com., apple.com. [3d22h26m2s] NS nserver.euro.apple.com. ar: nserver.asia.apple.com. [1d22h46m2s] A 17.82.254.3, nserver3.apple.com. [4d22h46m3s] A 17.112.144.50, nserver.apple.com. [22h23m31s] A 17.254.0.50, nserver4.apple.com. [4d22h46m3s] A 17.112.144.59, nserver.euro.apple.com. [1d22h46m2s] A 17.72.133.64, nserver2.apple.com. [4d22h46m3s] A 17.254.0.59 (298)
00:55:39.424083 IP (tos 0x0, ttl 64, id 48206, offset 0, flags [DF], proto TCP (6), length 64)
10.1.1.40.50279 > 17.250.248.105.80: Flags [S], cksum 0x70a3 (correct), seq 3011644867, win 65535, options [mss 1460,nop,wscale 2,nop,nop,TS val 840759478 ecr 0,sackOK,eol], length 0
00:55:39.639094 IP (tos 0x0, ttl 244, id 50526, offset 0, flags [none], proto TCP (6), length 44)
17.250.248.105.80 > 10.1.1.40.50279: Flags [S.], cksum 0x52c8 (correct), seq 1892554999, ack 3011644868, win 8190, options [mss 1460], length 0
00:55:40.073903 IP (tos 0x0, ttl 64, id 38688, offset 0, flags [DF], proto TCP (6), length 40)
10.1.1.40.50279 > 17.250.248.105.80: Flags [.], cksum 0x8a83 (correct), seq 1, ack 1, win 65535, length 0
00:55:40.084134 IP (tos 0x0, ttl 64, id 44842, offset 0, flags [DF], proto TCP (6), length 349)
10.1.1.40.50279 > 17.250.248.105.80: Flags [P.], cksum 0x472e (correct), seq 1:310, ack 1, win 65535, length 309
00:55:40.296377 IP (tos 0x0, ttl 53, id 11993, offset 0, flags [DF], proto TCP (6), length 40)
17.250.248.105.80 > 10.1.1.40.50279: Flags [.], cksum 0x4aa5 (correct), seq 1, ack 310, win 16041, length 0
00:55:40.296898 IP (tos 0x0, ttl 53, id 12249, offset 0, flags [DF], proto TCP (6), length 756)
17.250.248.105.80 > 10.1.1.40.50279: Flags [P.], cksum 0x0ae4 (correct), seq 1:717, ack 310, win 16384, length 716
00:55:40.372854 IP (tos 0x0, ttl 64, id 4728, offset 0, flags [DF], proto TCP (6), length 40)
10.1.1.40.50279 > 17.250.248.105.80: Flags [.], cksum 0x8682 (correct), seq 310, ack 717, win 65535, length 0
00:55:42.374466 IP (tos 0x0, ttl 64, id 51541, offset 0, flags [DF], proto TCP (6), length 40)
10.1.1.40.50279 > 17.250.248.105.80: Flags [F.], cksum 0x8681 (correct), seq 310, ack 717, win 65535, length 0
00:55:42.603752 IP (tos 0x0, ttl 244, id 41042, offset 0, flags [none], proto TCP (6), length 40)
17.250.248.105.80 > 10.1.1.40.50279: Flags [F.], cksum 0x6682 (correct), seq 717, ack 311, win 8190, length 0
00:55:42.631149 IP (tos 0x0, ttl 64, id 28718, offset 0, flags [DF], proto TCP (6), length 40)
10.1.1.40.50279 > 17.250.248.105.80: Flags [.], cksum 0x8680 (correct), seq 311, ack 718, win 65535, length 0
00:55:48.237707 IP (tos 0x0, ttl 255, id 22365, offset 0, flags [none], proto UDP (17), length 77)
10.1.1.40.49702 > 91.192.159.1.53: [udp sum ok] 39314+ A? safebrowsing.clients.google.com. (49)
00:55:48.240288 IP (tos 0x0, ttl 61, id 2573, offset 0, flags [none], proto UDP (17), length 317)
91.192.159.1.53 > 10.1.1.40.49702: [udp sum ok] 39314 q: A? safebrowsing.clients.google.com. 6/4/4 safebrowsing.clients.google.com. [3m6s] CNAME clients.l.google.com., clients.l.google.com. [4m24s] A 74.125.87.138, clients.l.google.com. [4m24s] A 74.125.87.102, clients.l.google.com. [4m24s] A 74.125.87.113, clients.l.google.com. [4m24s] A 74.125.87.101, clients.l.google.com. [4m24s] A 74.125.87.100 ns: google.com. [1d22h14m30s] NS ns1.google.com., google.com. [1d22h14m30s] NS ns2.google.com., google.com. [1d22h14m30s] NS ns4.google.com., google.com. [1d22h14m30s] NS ns3.google.com. ar: ns1.google.com. [15h44m53s] A 216.239.32.10, ns2.google.com. [15h44m53s] A 216.239.34.10, ns3.google.com. [15h44m53s] A 216.239.36.10, ns4.google.com. [15h44m53s] A 216.239.38.10 (289)
00:55:48.476560 IP (tos 0x0, ttl 255, id 30027, offset 0, flags [none], proto UDP (17), length 51)
10.1.1.40.65243 > 91.192.159.1.53: [udp sum ok] 37477+ A? ya.ru. (23)
00:55:48.482958 IP (tos 0x0, ttl 61, id 2574, offset 0, flags [none], proto UDP (17), length 174)
91.192.159.1.53 > 10.1.1.40.65243: [udp sum ok] 37477 q: A? ya.ru. 3/2/2 ya.ru. [1h39m17s] A 77.88.21.8, ya.ru. [1h39m17s] A 93.158.134.8, ya.ru. [1h39m17s] A 213.180.204.8 ns: ya.ru. [14m38s] NS ns5.yandex.ru., ya.ru. [14m38s] NS ns1.yandex.ru. ar: ns1.yandex.ru. [1d22h14m37s] A 213.180.193.1, ns5.yandex.ru. [3d14h5m23s] A 213.180.204.1 (146)
00:55:48.490852 IP (tos 0x0, ttl 64, id 38488, offset 0, flags [DF], proto TCP (6), length 64)
10.1.1.40.50280 > 77.88.21.8.80: Flags [S], cksum 0x4c6e (correct), seq 849435265, win 65535, options [mss 1460,nop,wscale 2,nop,nop,TS val 840759569 ecr 0,sackOK,eol], length 0
00:55:48.529969 IP (tos 0x0, ttl 54, id 55964, offset 0, flags [DF], proto TCP (6), length 60)
77.88.21.8.80 > 10.1.1.40.50280: Flags [S.], cksum 0x59e6 (correct), seq 1168204995, ack 849435266, win 8192, options [mss 1410,nop,wscale 3,sackOK,TS val 1097070564 ecr 840759569], length 0
00:55:48.532046 IP (tos 0x0, ttl 64, id 57651, offset 0, flags [DF], proto TCP (6), length 52)
10.1.1.40.50280 > 77.88.21.8.80: Flags [.], cksum 0x2827 (correct), seq 1, ack 1, win 32853, options [nop,nop,TS val 840759569 ecr 1097070564], length 0
00:55:48.537461 IP (tos 0x0, ttl 64, id 33888, offset 0, flags [DF], proto TCP (6), length 414)
10.1.1.40.50280 > 77.88.21.8.80: Flags [P.], cksum 0x0797 (correct), seq 1:363, ack 1, win 32853, options [nop,nop,TS val 840759569 ecr 1097070564], length 362
00:55:48.577403 IP (tos 0x0, ttl 54, id 56121, offset 0, flags [DF], proto TCP (6), length 1450)
77.88.21.8.80 > 10.1.1.40.50280: Flags [.], cksum 0xccb4 (correct), seq 1:1399, ack 363, win 1048, options [nop,nop,TS val 1097070611 ecr 840759569], length 1398
00:55:48.577649 IP (tos 0x0, ttl 54, id 56122, offset 0, flags [DF], proto TCP (6), length 1290)
77.88.21.8.80 > 10.1.1.40.50280: Flags [P.], cksum 0xf2a0 (correct), seq 1399:2637, ack 363, win 1048, options [nop,nop,TS val 1097070611 ecr 840759569], length 1238
00:55:48.581218 IP (tos 0x0, ttl 64, id 57939, offset 0, flags [DF], proto TCP (6), length 52)
10.1.1.40.50280 > 77.88.21.8.80: Flags [.], cksum 0x1ed4 (correct), seq 363, ack 2637, win 32194, options [nop,nop,TS val 840759570 ecr 1097070611], length 0
00:55:50.059058 IP (tos 0x0, ttl 64, id 59003, offset 0, flags [DF], proto TCP (6), length 359)
10.1.1.40.50280 > 77.88.21.8.80: Flags [P.], cksum 0xb85a (correct), seq 363:670, ack 2637, win 32853, options [nop,nop,TS val 840759584 ecr 1097070611], length 307
00:55:50.110824 IP (tos 0x0, ttl 54, id 59531, offset 0, flags [DF], proto TCP (6), length 1450)
77.88.21.8.80 > 10.1.1.40.50280: Flags [.], cksum 0xd5af (correct), seq 2637:4035, ack 670, win 1048, options [nop,nop,TS val 1097072143 ecr 840759584], length 1398
00:55:50.111047 IP (tos 0x0, ttl 54, id 59532, offset 0, flags [DF], proto TCP (6), length 282)
77.88.21.8.80 > 10.1.1.40.50280: Flags [P.], cksum 0xa070 (correct), seq 4035:4265, ack 670, win 1048, options [nop,nop,TS val 1097072143 ecr 840759584], length 230
00:55:50.115265 IP (tos 0x0, ttl 64, id 47188, offset 0, flags [DF], proto TCP (6), length 52)
10.1.1.40.50280 > 77.88.21.8.80: Flags [.], cksum 0x103e (correct), seq 670, ack 4265, win 32446, options [nop,nop,TS val 840759585 ecr 1097072143], length 0
00:55:50.183798 IP (tos 0x0, ttl 255, id 19492, offset 0, flags [none], proto UDP (17), length 64)
10.1.1.40.50950 > 91.192.159.1.53: [udp sum ok] 17231+ A? www.tns-counter.ru. (36)
00:55:50.186825 IP (tos 0x0, ttl 61, id 2575, offset 0, flags [none], proto UDP (17), length 189)
91.192.159.1.53 > 10.1.1.40.50950: [udp sum ok] 17231 q: A? www.tns-counter.ru. 3/2/2 www.tns-counter.ru. [2m16s] A 217.73.200.222, www.tns-counter.ru. [2m16s] A 217.73.200.169, www.tns-counter.ru. [2m16s] A 217.73.200.221 ns: tns-counter.ru. [2m16s] NS ns1.stack.net., tns-counter.ru. [2m16s] NS ns0.stack.net. ar: ns0.stack.net. [1d22h26m11s] A 217.73.199.229, ns1.stack.net. [1d22h26m11s] A 217.73.194.104 (161)
00:55:50.204892 IP (tos 0x0, ttl 255, id 32775, offset 0, flags [none], proto UDP (17), length 60)
10.1.1.40.52407 > 91.192.159.1.53: [udp sum ok] 50295+ A? clck.yandex.ru. (32)
00:55:50.208112 IP (tos 0x0, ttl 61, id 2576, offset 0, flags [none], proto UDP (17), length 228)
91.192.159.1.53 > 10.1.1.40.52407: [udp sum ok] 50295 q: A? clck.yandex.ru. 2/4/4 clck.yandex.ru. [5m35s] A 213.180.204.14, clck.yandex.ru. [5m35s] A 77.88.21.14 ns: yandex.ru. [1d22h14m36s] NS ns2.yandex.ru., yandex.ru. [1d22h14m36s] NS ns5.yandex.ru., yandex.ru. [1d22h14m36s] NS ns1.yandex.ru., yandex.ru. [1d22h14m36s] NS ns4.yandex.ru. ar: ns1.yandex.ru. [1d22h14m36s] A 213.180.193.1, ns2.yandex.ru. [1d22h14m36s] A 213.180.199.34, ns4.yandex.ru. [1d22h17m35s] A 77.88.19.60, ns5.yandex.ru. [3d14h5m22s] A 213.180.204.1 (200)
00:55:50.212906 IP (tos 0x0, ttl 64, id 7465, offset 0, flags [DF], proto TCP (6), length 64)
10.1.1.40.50281 > 217.73.200.222.80: Flags [S], cksum 0x41f1 (correct), seq 354173609, win 65535, options [mss 1460,nop,wscale 2,nop,nop,TS val 840759586 ecr 0,sackOK,eol], length 0
00:55:50.224395 IP (tos 0x0, ttl 64, id 30251, offset 0, flags [DF], proto TCP (6), length 64)
10.1.1.40.50282 > 213.180.204.14.80: Flags [S], cksum 0xcd0f (correct), seq 668116280, win 65535, options [mss 1460,nop,wscale 2,nop,nop,TS val 840759586 ecr 0,sackOK,eol], length 0
00:55:50.264021 IP (tos 0x0, ttl 54, id 38821, offset 0, flags [DF], proto TCP (6), length 60)
213.180.204.14.80 > 10.1.1.40.50282: Flags [S.], cksum 0x6a66 (correct), seq 506637769, ack 668116281, win 8192, options [mss 1410,nop,wscale 8,sackOK,TS val 2228880115 ecr 840759586], length 0
00:55:50.266399 IP (tos 0x0, ttl 64, id 43834, offset 0, flags [DF], proto TCP (6), length 52)
10.1.1.40.50282 > 213.180.204.14.80: Flags [.], cksum 0x38ab (correct), seq 1, ack 1, win 32853, options [nop,nop,TS val 840759587 ecr 2228880115], length 0
00:55:50.271936 IP (tos 0x0, ttl 64, id 9510, offset 0, flags [DF], proto TCP (6), length 448)
10.1.1.40.50282 > 213.180.204.14.80: Flags [P.], cksum 0x4eb5 (correct), seq 1:397, ack 1, win 32853, options [nop,nop,TS val 840759587 ecr 2228880115], length 396
00:55:50.292517 IP (tos 0x0, ttl 54, id 2760, offset 0, flags [DF], proto TCP (6), length 52)
217.73.200.222.80 > 10.1.1.40.50281: Flags [S.], cksum 0xd29f (correct), seq 1704686078, ack 354173610, win 64240, options [mss 1460,nop,nop,sackOK,nop,wscale 13], length 0
00:55:50.294456 IP (tos 0x0, ttl 64, id 64780, offset 0, flags [DF], proto TCP (6), length 40)
10.1.1.40.50281 > 217.73.200.222.80: Flags [.], cksum 0x8e16 (correct), seq 1, ack 1, win 32850, length 0
00:55:50.300177 IP (tos 0x0, ttl 64, id 15950, offset 0, flags [DF], proto TCP (6), length 397)
10.1.1.40.50281 > 217.73.200.222.80: Flags [P.], cksum 0x8fa2 (correct), seq 1:358, ack 1, win 32850, length 357
00:55:50.314121 IP (tos 0x0, ttl 54, id 38939, offset 0, flags [DF], proto TCP (6), length 186)
213.180.204.14.80 > 10.1.1.40.50282: Flags [P.], cksum 0x4403 (correct), seq 1:135, ack 397, win 32, options [nop,nop,TS val 2228880165 ecr 840759587], length 134
00:55:50.314349 IP (tos 0x0, ttl 54, id 38940, offset 0, flags [DF], proto TCP (6), length 52)
213.180.204.14.80 > 10.1.1.40.50282: Flags [F.], cksum 0xb69b (correct), seq 135, ack 397, win 32, options [nop,nop,TS val 2228880165 ecr 840759587], length 0
00:55:50.316595 IP (tos 0x0, ttl 64, id 4634, offset 0, flags [DF], proto TCP (6), length 52)
10.1.1.40.50282 > 213.180.204.14.80: Flags [.], cksum 0x3689 (correct), seq 397, ack 135, win 32819, options [nop,nop,TS val 840759587 ecr 2228880165], length 0
00:55:50.317211 IP (tos 0x0, ttl 64, id 10812, offset 0, flags [DF], proto TCP (6), length 52)
10.1.1.40.50282 > 213.180.204.14.80: Flags [.], cksum 0x3688 (correct), seq 397, ack 136, win 32819, options [nop,nop,TS val 840759587 ecr 2228880165], length 0
00:55:50.328483 IP (tos 0x0, ttl 64, id 11326, offset 0, flags [DF], proto TCP (6), length 52)
10.1.1.40.50282 > 213.180.204.14.80: Flags [F.], cksum 0x3665 (correct), seq 397, ack 136, win 32853, options [nop,nop,TS val 840759587 ecr 2228880165], length 0
00:55:50.343273 IP (tos 0x0, ttl 54, id 29748, offset 0, flags [DF], proto TCP (6), length 40)
217.73.200.222.80 > 10.1.1.40.50281: Flags [.], cksum 0x0cfc (correct), seq 1, ack 358, win 8, length 0
00:55:50.344820 IP (tos 0x0, ttl 54, id 29750, offset 0, flags [DF], proto TCP (6), length 40)
217.73.200.222.80 > 10.1.1.40.50281: Flags [F.], cksum 0x0a9e (correct), seq 606, ack 358, win 8, length 0
00:55:50.345097 IP (tos 0x0, ttl 54, id 29749, offset 0, flags [DF], proto TCP (6), length 645)
217.73.200.222.80 > 10.1.1.40.50281: Flags [P.], cksum 0xd421 (correct), seq 1:606, ack 358, win 8, length 605
00:55:50.346789 IP (tos 0x0, ttl 64, id 45586, offset 0, flags [DF], proto TCP (6), length 40)
10.1.1.40.50281 > 217.73.200.222.80: Flags [.], cksum 0x8cb1 (correct), seq 358, ack 1, win 32850, length 0
00:55:50.348159 IP (tos 0x0, ttl 64, id 64113, offset 0, flags [DF], proto TCP (6), length 40)
10.1.1.40.50281 > 217.73.200.222.80: Flags [.], cksum 0x8aeb (correct), seq 358, ack 607, win 32698, length 0
00:55:50.363920 IP (tos 0x0, ttl 64, id 23561, offset 0, flags [DF], proto TCP (6), length 40)
10.1.1.40.50281 > 217.73.200.222.80: Flags [F.], cksum 0x8a52 (correct), seq 358, ack 607, win 32850, length 0
00:55:50.368075 IP (tos 0x0, ttl 54, id 39090, offset 0, flags [DF], proto TCP (6), length 52)
213.180.204.14.80 > 10.1.1.40.50282: Flags [.], cksum 0xb664 (correct), seq 136, ack 398, win 32, options [nop,nop,TS val 2228880219 ecr 840759587], length 0
00:55:50.408133 IP (tos 0x0, ttl 54, id 2773, offset 0, flags [DF], proto TCP (6), length 40)
217.73.200.222.80 > 10.1.1.40.50281: Flags [.], cksum 0x0a9d (correct), seq 607, ack 359, win 8, length 0
00:55:50.812067 IP (tos 0x0, ttl 255, id 36924, offset 0, flags [none], proto UDP (17), length 62)
10.1.1.40.65316 > 91.192.159.1.53: [udp sum ok] 18468+ A? export.yandex.ru. (34)
00:55:50.813920 IP (tos 0x0, ttl 64, id 32769, offset 0, flags [DF], proto TCP (6), length 64)
10.1.1.40.50283 > 217.73.200.222.80: Flags [S], cksum 0xf055 (correct), seq 2614234502, win 65535, options [mss 1460,nop,wscale 2,nop,nop,TS val 840759592 ecr 0,sackOK,eol], length 0
00:55:50.815194 IP (tos 0x0, ttl 61, id 2577, offset 0, flags [none], proto UDP (17), length 294)
91.192.159.1.53 > 10.1.1.40.65316: [udp sum ok] 18468 q: A? export.yandex.ru. 5/4/4 export.yandex.ru. [49m5s] CNAME corba-http-export.yandex.ru., corba-http-export.yandex.ru. [49m5s] A 213.180.204.69, corba-http-export.yandex.ru. [49m5s] A 77.88.21.69, corba-http-export.yandex.ru. [49m5s] A 87.250.251.69, corba-http-export.yandex.ru. [49m5s] A 93.158.134.69 ns: yandex.ru. [1d22h14m35s] NS ns1.yandex.ru., yandex.ru. [1d22h14m35s] NS ns5.yandex.ru., yandex.ru. [1d22h14m35s] NS ns2.yandex.ru., yandex.ru. [1d22h14m35s] NS ns4.yandex.ru. ar: ns1.yandex.ru. [1d22h14m35s] A 213.180.193.1, ns2.yandex.ru. [1d22h14m35s] A 213.180.199.34, ns4.yandex.ru. [1d22h17m34s] A 77.88.19.60, ns5.yandex.ru. [3d14h5m21s] A 213.180.204.1 (266)
00:55:50.829362 IP (tos 0x0, ttl 64, id 25911, offset 0, flags [DF], proto TCP (6), length 64)
10.1.1.40.50284 > 213.180.204.69.80: Flags [S], cksum 0xaa6f (correct), seq 2815444891, win 65535, options [mss 1460,nop,wscale 2,nop,nop,TS val 840759592 ecr 0,sackOK,eol], length 0
00:55:50.856540 IP (tos 0x0, ttl 54, id 2778, offset 0, flags [DF], proto TCP (6), length 52)
217.73.200.222.80 > 10.1.1.40.50283: Flags [S.], cksum 0x06e3 (correct), seq 1704389674, ack 2614234503, win 64240, options [mss 1460,nop,nop,sackOK,nop,wscale 13], length 0
00:55:50.858438 IP (tos 0x0, ttl 64, id 41222, offset 0, flags [DF], proto TCP (6), length 40)
10.1.1.40.50283 > 217.73.200.222.80: Flags [.], cksum 0xc259 (correct), seq 1, ack 1, win 32850, length 0
00:55:50.862963 IP (tos 0x0, ttl 64, id 39946, offset 0, flags [DF], proto TCP (6), length 397)
10.1.1.40.50283 > 217.73.200.222.80: Flags [P.], cksum 0xc2e5 (correct), seq 1:358, ack 1, win 32850, length 357
00:55:50.869431 IP (tos 0x0, ttl 54, id 2781, offset 0, flags [DF], proto TCP (6), length 52)
213.180.204.69.80 > 10.1.1.40.50284: Flags [S.], cksum 0x72a0 (correct), seq 2809191888, ack 2815444892, win 5640, options [mss 1410,nop,nop,sackOK,nop,wscale 4], length 0
00:55:50.871460 IP (tos 0x0, ttl 64, id 50793, offset 0, flags [DF], proto TCP (6), length 40)
10.1.1.40.50284 > 213.180.204.69.80: Flags [.], cksum 0x4937 (correct), seq 1, ack 1, win 32782, length 0
00:55:50.876150 IP (tos 0x0, ttl 64, id 27963, offset 0, flags [DF], proto TCP (6), length 379)
10.1.1.40.50284 > 213.180.204.69.80: Flags [P.], cksum 0xb3cc (correct), seq 1:340, ack 1, win 32782, length 339
00:55:50.905892 IP (tos 0x0, ttl 54, id 60368, offset 0, flags [DF], proto TCP (6), length 40)
217.73.200.222.80 > 10.1.1.40.50283: Flags [.], cksum 0x413f (correct), seq 1, ack 358, win 8, length 0
00:55:50.906172 IP (tos 0x0, ttl 54, id 60369, offset 0, flags [DF], proto TCP (6), length 478)
217.73.200.222.80 > 10.1.1.40.50283: Flags [P.], cksum 0x7f42 (correct), seq 1:439, ack 358, win 8, length 438
00:55:50.906334 IP (tos 0x0, ttl 54, id 60370, offset 0, flags [DF], proto TCP (6), length 40)
217.73.200.222.80 > 10.1.1.40.50283: Flags [F.], cksum 0x3f88 (correct), seq 439, ack 358, win 8, length 0
00:55:50.908898 IP (tos 0x0, ttl 64, id 51290, offset 0, flags [DF], proto TCP (6), length 40)
10.1.1.40.50283 > 217.73.200.222.80: Flags [.], cksum 0xbfac (correct), seq 358, ack 439, win 32740, length 0
00:55:50.909513 IP (tos 0x0, ttl 64, id 40553, offset 0, flags [DF], proto TCP (6), length 40)
10.1.1.40.50283 > 217.73.200.222.80: Flags [.], cksum 0xbfab (correct), seq 358, ack 440, win 32740, length 0
00:55:50.916730 IP (tos 0x0, ttl 54, id 46082, offset 0, flags [DF], proto TCP (6), length 40)
213.180.204.69.80 > 10.1.1.40.50284: Flags [.], cksum 0xc64e (correct), seq 1, ack 340, win 420, length 0
00:55:50.917031 IP (tos 0x0, ttl 54, id 46084, offset 0, flags [DF], proto TCP (6), length 638)
213.180.204.69.80 > 10.1.1.40.50284: Flags [P.], cksum 0x64ff (correct), seq 1411:2009, ack 340, win 420, length 598
00:55:50.918419 IP (tos 0x0, ttl 54, id 46083, offset 0, flags [DF], proto TCP (6), length 1450)
213.180.204.69.80 > 10.1.1.40.50284: Flags [.], cksum 0x6de4 (correct), seq 1:1411, ack 340, win 420, length 1410
00:55:50.919500 IP (tos 0x0, ttl 64, id 29471, offset 0, flags [DF], proto TCP (6), length 52)
10.1.1.40.50284 > 213.180.204.69.80: Flags [.], cksum 0xf9ed (correct), seq 340, ack 1, win 32782, options [nop,nop,sack 1 {1411:2009}], length 0
00:55:50.920472 IP (tos 0x0, ttl 64, id 42332, offset 0, flags [DF], proto TCP (6), length 40)
10.1.1.40.50283 > 217.73.200.222.80: Flags [F.], cksum 0xbf3c (correct), seq 358, ack 440, win 32850, length 0
00:55:50.921756 IP (tos 0x0, ttl 64, id 33565, offset 0, flags [DF], proto TCP (6), length 40)
10.1.1.40.50284 > 213.180.204.69.80: Flags [.], cksum 0x4202 (correct), seq 340, ack 2009, win 32280, length 0
00:55:50.971421 IP (tos 0x0, ttl 54, id 2798, offset 0, flags [DF], proto TCP (6), length 40)
217.73.200.222.80 > 10.1.1.40.50283: Flags [.], cksum 0x3f87 (correct), seq 440, ack 359, win 8, length 0
00:55:51.454068 IP (tos 0x0, ttl 255, id 53615, offset 0, flags [none], proto UDP (17), length 63)
10.1.1.40.57773 > 91.192.159.1.53: [udp sum ok] 19927+ A? suggest.yandex.ru. (35)
00:55:51.456160 IP (tos 0x0, ttl 61, id 2578, offset 0, flags [none], proto UDP (17), length 245)
91.192.159.1.53 > 10.1.1.40.57773: [udp sum ok] 19927 q: A? suggest.yandex.ru. 4/3/3 suggest.yandex.ru. [2h10m22s] CNAME suggest.yandex.net., suggest.yandex.net. [27m55s] A 93.158.134.63, suggest.yandex.net. [27m55s] A 77.88.21.63, suggest.yandex.net. [27m55s] A 87.250.251.63 ns: yandex.net. [1d22h24m57s] NS ns1.yandex.net., yandex.net. [1d22h24m57s] NS ns5.yandex.net., yandex.net. [1d22h24m57s] NS ns2.yandex.net. ar: ns1.yandex.net. [1d10h29m40s] A 213.180.193.1, ns2.yandex.net. [1d12h20m10s] A 213.180.199.34, ns5.yandex.net. [1d9h42m53s] A 213.180.204.1 (217)
00:55:51.459940 IP (tos 0x0, ttl 64, id 61729, offset 0, flags [DF], proto TCP (6), length 379)
10.1.1.40.50280 > 77.88.21.8.80: Flags [P.], cksum 0xf992 (correct), seq 670:997, ack 4265, win 32853, options [nop,nop,TS val 840759598 ecr 1097072143], length 327
00:55:51.471259 IP (tos 0x0, ttl 64, id 31749, offset 0, flags [DF], proto TCP (6), length 64)
10.1.1.40.50285 > 93.158.134.63.80: Flags [S], cksum 0x5452 (correct), seq 810734411, win 65535, options [mss 1460,nop,wscale 2,nop,nop,TS val 840759599 ecr 0,sackOK,eol], length 0
00:55:51.499761 IP (tos 0x0, ttl 54, id 62396, offset 0, flags [DF], proto TCP (6), length 935)
77.88.21.8.80 > 10.1.1.40.50280: Flags [P.], cksum 0xe497 (correct), seq 4265:5148, ack 997, win 1048, options [nop,nop,TS val 1097073534 ecr 840759598], length 883
00:55:51.502937 IP (tos 0x0, ttl 64, id 36403, offset 0, flags [DF], proto TCP (6), length 52)
10.1.1.40.50280 > 77.88.21.8.80: Flags [.], cksum 0x054d (correct), seq 997, ack 5148, win 32632, options [nop,nop,TS val 840759599 ecr 1097073534], length 0
00:55:51.510305 IP (tos 0x0, ttl 54, id 2807, offset 0, flags [DF], proto TCP (6), length 60)
93.158.134.63.80 > 10.1.1.40.50285: Flags [S.], cksum 0x4597 (correct), seq 1096213033, ack 810734412, win 5592, options [mss 1410,sackOK,TS val 261084915 ecr 840759599,nop,wscale 8], length 0
00:55:51.512196 IP (tos 0x0, ttl 64, id 20837, offset 0, flags [DF], proto TCP (6), length 52)
10.1.1.40.50285 > 93.158.134.63.80: Flags [.], cksum 0x09b5 (correct), seq 1, ack 1, win 32853, options [nop,nop,TS val 840759599 ecr 261084915], length 0
00:55:51.518033 IP (tos 0x0, ttl 64, id 8972, offset 0, flags [DF], proto TCP (6), length 378)
10.1.1.40.50285 > 93.158.134.63.80: Flags [P.], cksum 0x91d5 (correct), seq 1:327, ack 1, win 32853, options [nop,nop,TS val 840759599 ecr 261084915], length 326
00:55:51.556930 IP (tos 0x0, ttl 54, id 13525, offset 0, flags [DF], proto TCP (6), length 52)
93.158.134.63.80 > 10.1.1.40.50285: Flags [.], cksum 0x889d (correct), seq 1, ack 327, win 27, options [nop,nop,TS val 261084927 ecr 840759599], length 0
00:55:51.558053 IP (tos 0x0, ttl 54, id 13526, offset 0, flags [DF], proto TCP (6), length 1450)
93.158.134.63.80 > 10.1.1.40.50285: Flags [.], cksum 0x88c0 (correct), seq 1:1399, ack 327, win 27, options [nop,nop,TS val 261084927 ecr 840759599], length 1398
00:55:51.558304 IP (tos 0x0, ttl 54, id 13527, offset 0, flags [DF], proto TCP (6), length 1450)
93.158.134.63.80 > 10.1.1.40.50285: Flags [.], cksum 0x7d0a (correct), seq 1399:2797, ack 327, win 27, options [nop,nop,TS val 261084927 ecr 840759599], length 1398
00:55:51.561989 IP (tos 0x0, ttl 64, id 64545, offset 0, flags [DF], proto TCP (6), length 52)
10.1.1.40.50285 > 93.158.134.63.80: Flags [.], cksum 0x0032 (correct), seq 327, ack 2797, win 32154, options [nop,nop,TS val 840759599 ecr 261084927], length 0
00:55:51.602453 IP (tos 0x0, ttl 54, id 13528, offset 0, flags [DF], proto TCP (6), length 1450)
93.158.134.63.80 > 10.1.1.40.50285: Flags [.], cksum 0x6da3 (correct), seq 2797:4195, ack 327, win 27, options [nop,nop,TS val 261084938 ecr 840759599], length 1398
00:55:51.602704 IP (tos 0x0, ttl 54, id 13529, offset 0, flags [DF], proto TCP (6), length 732)
93.158.134.63.80 > 10.1.1.40.50285: Flags [P.], cksum 0x10c7 (correct), seq 4195:4875, ack 327, win 27, options [nop,nop,TS val 261084938 ecr 840759599], length 680
00:55:51.606066 IP (tos 0x0, ttl 64, id 34576, offset 0, flags [DF], proto TCP (6), length 52)
10.1.1.40.50285 > 93.158.134.63.80: Flags [.], cksum 0xf754 (correct), seq 327, ack 4875, win 32333, options [nop,nop,TS val 840759600 ecr 261084938], length 0
00:55:53.498991 IP (tos 0x0, ttl 54, id 1027, offset 0, flags [DF], proto TCP (6), length 52)
77.88.21.8.80 > 10.1.1.40.50280: Flags [F.], cksum 0x78dc (correct), seq 5148, ack 997, win 1048, options [nop,nop,TS val 1097075534 ecr 840759599], length 0
00:55:53.585169 IP (tos 0x0, ttl 64, id 4433, offset 0, flags [DF], proto TCP (6), length 52)
10.1.1.40.50280 > 77.88.21.8.80: Flags [.], cksum 0xfc89 (correct), seq 997, ack 5149, win 32853, options [nop,nop,TS val 840759620 ecr 1097075534], length 0
00:55:53.898715 IP (tos 0x0, ttl 255, id 43119, offset 0, flags [none], proto UDP (17), length 104)
10.1.1.40.5353 > 224.0.0.251.5353: [udp sum ok] 0*- [0q] 2/0/0 iPodik.local. (Cache flush) [2m] A 10.1.1.40, 40.1.1.10.in-addr.arpa. (Cache flush) [2m] PTR iPodik.local. (76)
00:55:54.465849 IP (tos 0x0, ttl 64, id 1142, offset 0, flags [DF], proto TCP (6), length 52)
10.1.1.40.50285 > 93.158.134.63.80: Flags [F.], cksum 0xf52f (correct), seq 327, ack 4875, win 32853, options [nop,nop,TS val 840759628 ecr 261084938], length 0
00:55:54.466271 IP (tos 0x0, ttl 64, id 22112, offset 0, flags [DF], proto TCP (6), length 52)
10.1.1.40.50280 > 77.88.21.8.80: Flags [F.], cksum 0xfc80 (correct), seq 997, ack 5149, win 32853, options [nop,nop,TS val 840759628 ecr 1097075534], length 0
00:55:54.466566 IP (tos 0x0, ttl 64, id 51249, offset 0, flags [DF], proto TCP (6), length 40)
10.1.1.40.50284 > 213.180.204.69.80: Flags [F.], cksum 0x400b (correct), seq 340, ack 2009, win 32782, length 0
00:55:54.528750 IP (tos 0x0, ttl 54, id 13530, offset 0, flags [DF], proto TCP (6), length 52)
93.158.134.63.80 > 10.1.1.40.50285: Flags [F.], cksum 0x728d (correct), seq 4875, ack 328, win 27, options [nop,nop,TS val 261085670 ecr 840759628], length 0
00:55:54.528983 IP (tos 0x0, ttl 54, id 3265, offset 0, flags [DF], proto TCP (6), length 52)
77.88.21.8.80 > 10.1.1.40.50280: Flags [.], cksum 0x74b9 (correct), seq 5149, ack 998, win 1048, options [nop,nop,TS val 1097076563 ecr 840759628], length 0
00:55:54.530342 IP (tos 0x0, ttl 54, id 46085, offset 0, flags [DF], proto TCP (6), length 40)
213.180.204.69.80 > 10.1.1.40.50284: Flags [F.], cksum 0xbe74 (correct), seq 2009, ack 341, win 420, length 0
00:55:54.532310 IP (tos 0x0, ttl 64, id 30257, offset 0, flags [DF], proto TCP (6), length 52)
10.1.1.40.50285 > 93.158.134.63.80: Flags [.], cksum 0xf251 (correct), seq 328, ack 4876, win 32853, options [nop,nop,TS val 840759629 ecr 261085670], length 0
00:55:54.533201 IP (tos 0x0, ttl 64, id 65368, offset 0, flags [DF], proto TCP (6), length 40)
10.1.1.40.50284 > 213.180.204.69.80: Flags [.], cksum 0x400a (correct), seq 341, ack 2010, win 32782, length 0
00:56:05.693780 IP (tos 0x0, ttl 64, id 28193, offset 0, flags [none], proto UDP (17), length 328)
10.1.1.40.68 > 10.1.0.1.67: [udp sum ok] BOOTP/DHCP, Request from 00:1d:4f:ac:36:dd, length 300, xid 0xa9ec73bf, Flags [none] (0x0000)
Client-IP 10.1.1.40
Client-Ethernet-Address 00:1d:4f:ac:36:dd
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message Option 53, length 1: Request
Parameter-Request Option 55, length 6:
Subnet-Mask, Default-Gateway, Domain-Name-Server, Domain-Name
Option 119, Option 252
MSZ Option 57, length 2: 1500
Client-ID Option 61, length 7: ether 00:1d:4f:ac:36:dd
Lease-Time Option 51, length 4: 7776000
Hostname Option 12, length 6: "iPodik"
END Option 255, length 0
PAD Option 0, length 0, occurs 21
00:56:05.710233 IP (tos 0xc0, ttl 64, id 60084, offset 0, flags [none], proto ICMP (1), length 356)
10.1.0.1 > 10.1.1.40: ICMP 10.1.0.1 udp port 67 unreachable, length 336
IP (tos 0x0, ttl 64, id 28193, offset 0, flags [none], proto UDP (17), length 328)
10.1.1.40.68 > 10.1.0.1.67: [udp sum ok] BOOTP/DHCP, Request from 00:1d:4f:ac:36:dd, length 300, xid 0xa9ec73bf, Flags [none] (0x0000)
Client-IP 10.1.1.40
Client-Ethernet-Address 00:1d:4f:ac:36:dd
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message Option 53, length 1: Request
Parameter-Request Option 55, length 6:
Subnet-Mask, Default-Gateway, Domain-Name-Server, Domain-Name
Option 119, Option 252
MSZ Option 57, length 2: 1500
Client-ID Option 61, length 7: ether 00:1d:4f:ac:36:dd
Lease-Time Option 51, length 4: 7776000
Hostname Option 12, length 6: "iPodik"
END Option 255, length 0
PAD Option 0, length 0, occurs 21
00:56:05.710446 IP (tos 0x0, ttl 16, id 0, offset 0, flags [none], proto UDP (17), length 331)
10.1.0.1.67 > 10.1.1.40.68: [udp sum ok] BOOTP/DHCP, Reply, length 303, xid 0xa9ec73bf, Flags [none] (0x0000)
Client-IP 10.1.1.40
Your-IP 10.1.1.40
Client-Ethernet-Address 00:1d:4f:ac:36:dd
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message Option 53, length 1: ACK
Subnet-Mask Option 1, length 4: 255.255.255.255
Static-Route Option 33, length 8: (10.1.0.1:10.1.1.40)
Default-Gateway Option 3, length 4: 10.1.0.1
Domain-Name-Server Option 6, length 8: 10.1.0.1,10.1.0.1
Domain-Name Option 15, length 9: "coova.org"
Lease-Time Option 51, length 4: 100
MTU Option 26, length 2: 1500
Server-ID Option 54, length 4: 10.1.0.1
END Option 255, length 0
00:56:25.900109 IP (tos 0x0, ttl 255, id 38931, offset 0, flags [none], proto UDP (17), length 104)
10.1.1.40.5353 > 224.0.0.251.5353: [udp sum ok] 0*- [0q] 2/0/0 iPodik.local. (Cache flush) [2m] A 10.1.1.40, 40.1.1.10.in-addr.arpa. (Cache flush) [2m] PTR iPodik.local. (76)
More information about the Chilli
mailing list