[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#253717: atftpd Packet Capture + syslog [LONG email]



Hello, i just thought the following syslog/packet capture might be helpful.

First off, the syslog:
[SNIP /var/log/syslog]
Jun 10 15:05:30 sine dhcpd: Internet Software Consortium DHCP Server V3.0.1rc13Jun 10 15:05:30 sine dhcpd: Copyright 1995-2003 Internet Software Consortium.
Jun 10 15:05:30 sine dhcpd: All rights reserved.
Jun 10 15:05:30 sine dhcpd: For info, please visit http://www.isc.org/products/DHCP
Jun 10 15:05:30 sine dhcpd: Wrote 0 deleted host decls to leases file.
Jun 10 15:05:30 sine dhcpd: Wrote 0 new dynamic host decls to leases file.
Jun 10 15:05:30 sine dhcpd: Wrote 0 leases to leases file.
Jun 10 15:05:45 sine kernel: device eth0 entered promiscuous mode
Jun 10 15:06:29 sine dhcpd: DHCPDISCOVER from 00:01:02:c1:42:3c via eth0
Jun 10 15:06:29 sine dhcpd: DHCPOFFER on 192.168.6.3 to 00:01:02:c1:42:3c via eth0 Jun 10 15:06:31 sine dhcpd: DHCPREQUEST for 192.168.6.3 (192.168.6.7) from 00:01:02:c1:42:3c via eth0 Jun 10 15:06:31 sine dhcpd: DHCPACK on 192.168.6.3 to 00:01:02:c1:42:3c via eth0
Jun 10 15:06:31 sine in.tftpd[21345]: connect from 192.168.6.3 (192.168.6.3)
Jun 10 15:06:31 sine tftpd[21345]: Trivial FTP server started (0.6.2)
Jun 10 15:06:31 sine tftpd[21345]:   started by inetd
Jun 10 15:06:31 sine tftpd[21345]:   logging level: 7
Jun 10 15:06:31 sine tftpd[21345]:   directory: /tftpboot/
Jun 10 15:06:31 sine tftpd[21345]:   user: nobody.nogroup
Jun 10 15:06:31 sine tftpd[21345]:   log file: syslog
Jun 10 15:06:31 sine tftpd[21345]:   server timeout: 300
Jun 10 15:06:31 sine tftpd[21345]:   tftp retry timeout: 5
Jun 10 15:06:31 sine tftpd[21345]:   maximum number of thread: 100
Jun 10 15:06:31 sine tftpd[21345]:   option timeout:   enabled
Jun 10 15:06:31 sine tftpd[21345]:   option tzise:     enabled
Jun 10 15:06:31 sine tftpd[21345]:   option blksize:   enabled
Jun 10 15:06:31 sine tftpd[21345]:   option multicast: disabled
Jun 10 15:06:31 sine tftpd[21345]:      address range: 239.255.0.0-255
Jun 10 15:06:31 sine tftpd[21345]:      port range:    1753
Jun 10 15:06:31 sine tftpd[21347]: Serving pxegrub to 192.168.6.3:2070
Jun 10 15:06:31 sine tftpd[21347]: received RRQ <filename: pxegrub, mode: octet, tsize: 0>
Jun 10 15:06:31 sine tftpd[21347]: tsize option -> 199204
Jun 10 15:06:31 sine tftpd[21347]: sent OACK <tsize: 199204>
Jun 10 15:06:31 sine tftpd[21347]: received ERROR <code: 0, msg: TFTP Aborted>
Jun 10 15:06:31 sine tftpd[21347]: Aborting transfer
Jun 10 15:06:31 sine tftpd[21347]: Server thread exiting
Jun 10 15:06:31 sine tftpd[21348]: Serving pxegrub to 192.168.6.3:2071
Jun 10 15:06:31 sine tftpd[21348]: received RRQ <filename: pxegrub, mode: octet, blksize: 1456>
Jun 10 15:06:31 sine tftpd[21348]: blksize option -> 1456
Jun 10 15:06:31 sine tftpd[21348]: sent OACK <blksize: 1456>
Jun 10 15:06:31 sine tftpd[21348]: received ACK <block: 0>
Jun 10 15:06:31 sine tftpd[21348]: sent DATA <block: 1, size 1456>
Jun 10 15:06:36 sine tftpd[21348]: timeout: retrying...
Jun 10 15:06:36 sine tftpd[21348]: sent DATA <block: 1, size 1456>
Jun 10 15:06:36 sine tftpd[21348]: received ACK <block: 1>
Jun 10 15:06:36 sine tftpd[21348]: sent DATA <block: 2, size 1456>
Jun 10 15:06:37 sine tftpd[21348]: received ACK <block: 1>
Jun 10 15:06:37 sine tftpd[21348]: sent DATA <block: 2, size 1456>
Jun 10 15:06:39 sine tftpd[21348]: received ACK <block: 1>
Jun 10 15:06:39 sine tftpd[21348]: sent DATA <block: 2, size 1456>
Jun 10 15:06:43 sine tftpd[21348]: received ACK <block: 1>
Jun 10 15:06:43 sine tftpd[21348]: sent DATA <block: 2, size 1456>
Jun 10 15:06:48 sine tftpd[21348]: timeout: retrying...
Jun 10 15:06:48 sine tftpd[21348]: sent DATA <block: 2, size 1456>
Jun 10 15:06:49 sine tftpd[21348]: received ACK <block: 1>
Jun 10 15:06:49 sine tftpd[21348]: sent DATA <block: 2, size 1456>
Jun 10 15:06:54 sine tftpd[21348]: timeout: retrying...
Jun 10 15:06:54 sine tftpd[21348]: sent DATA <block: 2, size 1456>
Jun 10 15:06:54 sine tftpd[21348]: received ACK <block: 2>
Jun 10 15:06:54 sine tftpd[21348]: sent DATA <block: 3, size 1456>
Jun 10 15:06:55 sine tftpd[21348]: received ACK <block: 2>
Jun 10 15:06:55 sine tftpd[21348]: sent DATA <block: 3, size 1456>
Jun 10 15:06:57 sine tftpd[21348]: received ACK <block: 2>
Jun 10 15:06:57 sine tftpd[21348]: sent DATA <block: 3, size 1456>
Jun 10 15:06:57 sine tftpd[21348]: received ACK <block: 3>
Jun 10 15:06:57 sine tftpd[21348]: sent DATA <block: 4, size 1456>
Jun 10 15:06:57 sine tftpd[21348]: received ACK <block: 4>
Jun 10 15:06:57 sine tftpd[21348]: sent DATA <block: 5, size 1456>
Jun 10 15:06:57 sine tftpd[21348]: received ACK <block: 4>
Jun 10 15:06:57 sine tftpd[21348]: sent DATA <block: 5, size 1456>
Jun 10 15:06:59 sine tftpd[21348]: received ACK <block: 4>
Jun 10 15:06:59 sine tftpd[21348]: sent DATA <block: 5, size 1456>
Jun 10 15:07:04 sine tftpd[21348]: received ACK <block: 4>
Jun 10 15:07:04 sine tftpd[21348]: sent DATA <block: 5, size 1456>
Jun 10 15:07:09 sine tftpd[21348]: timeout: retrying...
Jun 10 15:07:09 sine tftpd[21348]: sent DATA <block: 5, size 1456>
Jun 10 15:07:10 sine tftpd[21348]: received ACK <block: 4>
Jun 10 15:07:10 sine tftpd[21348]: sent DATA <block: 5, size 1456>
Jun 10 15:07:10 sine tftpd[21348]: received ACK <block: 5>
Jun 10 15:07:10 sine tftpd[21348]: sent DATA <block: 6, size 1456>
Jun 10 15:07:10 sine tftpd[21348]: received ACK <block: 5>
Jun 10 15:07:10 sine tftpd[21348]: sent DATA <block: 6, size 1456>
Jun 10 15:07:12 sine tftpd[21348]: received ACK <block: 5>
Jun 10 15:07:12 sine tftpd[21348]: sent DATA <block: 6, size 1456>
Jun 10 15:07:17 sine tftpd[21348]: received ACK <block: 5>
Jun 10 15:07:17 sine tftpd[21348]: sent DATA <block: 6, size 1456>
Jun 10 15:07:22 sine tftpd[21348]: timeout: retrying...
Jun 10 15:07:22 sine tftpd[21348]: sent DATA <block: 6, size 1456>
Jun 10 15:07:23 sine tftpd[21348]: received ACK <block: 5>
Jun 10 15:07:23 sine tftpd[21348]: sent DATA <block: 6, size 1456>
Jun 10 15:07:23 sine tftpd[21348]: received ACK <block: 6>
Jun 10 15:07:23 sine tftpd[21348]: sent DATA <block: 7, size 1456>
Jun 10 15:07:23 sine tftpd[21348]: received ACK <block: 6>
Jun 10 15:07:23 sine tftpd[21348]: sent DATA <block: 7, size 1456>
Jun 10 15:07:25 sine tftpd[21348]: received ACK <block: 6>
Jun 10 15:07:25 sine tftpd[21348]: sent DATA <block: 7, size 1456>
Jun 10 15:07:30 sine tftpd[21348]: received ACK <block: 6>
Jun 10 15:07:30 sine tftpd[21348]: sent DATA <block: 7, size 1456>
Jun 10 15:07:35 sine tftpd[21348]: Aborting transfer
Jun 10 15:07:35 sine tftpd[21348]: Server thread exiting
Jun 10 15:08:54 sine kernel: device eth0 left promiscuous mode
Jun 10 15:11:31 sine tftpd[21345]: atftpd terminating after 300 seconds
Jun 10 15:11:31 sine tftpd[21345]:   Load measurements:
Jun 10 15:11:31 sine tftpd[21345]:    User:    0.170s  Sys:   0.170s
Jun 10 15:11:31 sine tftpd[21345]:    Total: 300.068s  CPU:   0.113%
Jun 10 15:11:31 sine tftpd[21345]:   Time between connections:
Jun 10 15:11:31 sine tftpd[21345]:    Min: 0.056s Max: 0.056s
Jun 10 15:11:31 sine tftpd[21345]:   Thread stats:
Jun 10 15:11:31 sine tftpd[21345]:    simultaneous threads:     1
Jun 10 15:11:31 sine tftpd[21345]:    number of servers:        0
Jun 10 15:11:31 sine tftpd[21345]:    number of aborts:         0
Jun 10 15:11:31 sine tftpd[21345]:    number of errors:         2
Jun 10 15:11:31 sine tftpd[21345]:    number of files sent:     0
Jun 10 15:11:31 sine tftpd[21345]:    number of files received: 0
Jun 10 15:11:31 sine tftpd[21345]: Main thread exiting
[/SNIP]

Next, the tcpdump output which coincides with the syslog

sine:/home/erisha# sleep 2s; tcpdump -i eth0 -n -vvv -XX > packet_capture-3c-atftpd.log tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
86 packets captured
87 packets received by filter
0 packets dropped by kernel

[SNIP packet_capture-3c-atftpd.log]
15:05:45.772142 IP (tos 0x10, ttl 64, id 50161, offset 0, flags [DF], length: 100) 192.168.6.7.22 > 192.168.6.2.46763: P 1272878611:1272878659(48) ack 1269111402 win 11552 <nop,nop,timestamp 75305949 434607512>
   0x0000:  0050 2ca3 f8c0 0005 0240 5b61 0800 4510  .P,......@[a..E.
   0x0010:  0064 c3f1 4000 4006 e938 c0a8 0607 c0a8  .d..@.@..8......
   0x0020:  0602 0016 b6ab 4bde 9613 4ba5 1a6a 8018  ......K...K..j..
   0x0030:  2d20 afa2 0000 0101 080a 047d 13dd 19e7  -..........}....
   0x0040:  9598 061f 0142 0375 cf8f 0c80 f42b 4303  .....B.u.....+C.
   0x0050:  a5c5 c3d1 bbc7 787c fb7c e2ea 125e e9e4  ......x|.|...^..
15:05:45.772611 IP (tos 0x10, ttl 64, id 45292, offset 0, flags [DF], length: 52) 192.168.6.2.46763 > 192.168.6.7.22: . [tcp sum ok] 1:1(0) ack 48 win 9344 <nop,nop,timestamp 434609598 75305949>
   0x0000:  0005 0240 5b61 0050 2ca3 f8c0 0800 4510  ...@[a.P,.....E.
   0x0010:  0034 b0ec 4000 4006 fc6d c0a8 0602 c0a8  .4..@.@..m......
   0x0020:  0607 b6ab 0016 4ba5 1a6a 4bde 9643 8010  ......K..jK..C..
   0x0030:  2480 f5f0 0000 0101 080a 19e7 9dbe 047d  $..............}
   0x0040:  13dd                                     ..
15:05:45.775924 IP (tos 0x10, ttl 64, id 50162, offset 0, flags [DF], length: 164) 192.168.6.7.22 > 192.168.6.2.46763: P 48:160(112) ack 1 win 11552 <nop,nop,timestamp 75305949 434609598>
   0x0000:  0050 2ca3 f8c0 0005 0240 5b61 0800 4510  .P,......@[a..E.
   0x0010:  00a4 c3f2 4000 4006 e8f7 c0a8 0607 c0a8  ....@.@.........
   0x0020:  0602 0016 b6ab 4bde 9643 4ba5 1a6a 8018  ......K..CK..j..
   0x0030:  2d20 9a8e 0000 0101 080a 047d 13dd 19e7  -..........}....
   0x0040:  9dbe 0189 551e 28ad c366 ac5e 36f2 1e0d  ....U.(..f.^6...
   0x0050:  e522 fb9e ba53 d358 bd0d 7cb2 6310 02c1  ."...S.X..|.c...
15:05:45.776450 IP (tos 0x10, ttl 64, id 45293, offset 0, flags [DF], length: 52) 192.168.6.2.46763 > 192.168.6.7.22: . [tcp sum ok] 1:1(0) ack 160 win 9232 <nop,nop,timestamp 434609602 75305949>
   0x0000:  0005 0240 5b61 0050 2ca3 f8c0 0800 4510  ...@[a.P,.....E.
   0x0010:  0034 b0ed 4000 4006 fc6c c0a8 0602 c0a8  .4..@.@..l......
   0x0020:  0607 b6ab 0016 4ba5 1a6a 4bde 96b3 8010  ......K..jK.....
   0x0030:  2410 f5ec 0000 0101 080a 19e7 9dc2 047d  $..............}
   0x0040:  13dd                                     ..
15:06:29.558236 IP (tos 0x0, ttl 20, id 0, offset 0, flags [none], length: 576) 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:01:02:c1:42:3c, length: 548, xid:0x3c1423c, secs:1024, flags: [Broadcast] (0x8000)
     Client Ethernet Address: 00:01:02:c1:42:3c [|bootp]
   0x0000:  ffff ffff ffff 0001 02c1 423c 0800 4500  ..........B<..E.
   0x0010:  0240 0000 0000 1411 a4ae 0000 0000 ffff  .@..............
   0x0020:  ffff 0044 0043 022c 4d06 0101 0600 03c1  ...D.C.,M.......
   0x0030:  423c 0400 8000 0000 0000 0000 0000 0000  B<..............
   0x0040:  0000 0000 0000 0001 02c1 423c 0000 0000  ..........B<....
   0x0050:  0000 0000 0000 0000 0000 0000 0000 0000  ................
15:06:29.567867 IP (tos 0x10, ttl 64, id 0, offset 0, flags [none], length: 328) 192.168.6.7.67 > 255.255.255.255.68: BOOTP/DHCP, Reply, length: 300, xid:0x3c1423c, secs:1024, flags: [Broadcast] (0x8000)
     Your IP: 192.168.6.3
     Server IP: 192.168.6.7
     Client Ethernet Address: 00:01:02:c1:42:3c [|bootp]
   0x0000:  ffff ffff ffff 0005 0240 5b61 0800 4510  .........@[a..E.
   0x0010:  0148 0000 0000 4011 b2e6 c0a8 0607 ffff  .H....@.........
   0x0020:  ffff 0043 0044 0134 25f6 0201 0600 03c1  ...C.D.4%.......
   0x0030:  423c 0400 8000 0000 0000 c0a8 0603 c0a8  B<..............
   0x0040:  0607 0000 0000 0001 02c1 423c 0000 0000  ..........B<....
   0x0050:  0000 0000 0000 0000 0000 0000 0000 0000  ................
15:06:31.495183 IP (tos 0x0, ttl 20, id 1, offset 0, flags [none], length: 576) 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:01:02:c1:42:3c, length: 548, xid:0x3c1423c, secs:1024, flags: [Broadcast] (0x8000)
     Client Ethernet Address: 00:01:02:c1:42:3c [|bootp]
   0x0000:  ffff ffff ffff 0001 02c1 423c 0800 4500  ..........B<..E.
   0x0010:  0240 0001 0000 1411 a4ad 0000 0000 ffff  .@..............
   0x0020:  ffff 0044 0043 022c 9e59 0101 0600 03c1  ...D.C.,.Y......
   0x0030:  423c 0400 8000 0000 0000 0000 0000 0000  B<..............
   0x0040:  0000 0000 0000 0001 02c1 423c 0000 0000  ..........B<....
   0x0050:  0000 0000 0000 0000 0000 0000 0000 0000  ................
15:06:31.509303 IP (tos 0x10, ttl 64, id 0, offset 0, flags [none], length: 328) 192.168.6.7.67 > 255.255.255.255.68: BOOTP/DHCP, Reply, length: 300, xid:0x3c1423c, secs:1024, flags: [Broadcast] (0x8000)
     Your IP: 192.168.6.3
     Server IP: 192.168.6.7
     Client Ethernet Address: 00:01:02:c1:42:3c [|bootp]
   0x0000:  ffff ffff ffff 0005 0240 5b61 0800 4510  .........@[a..E.
   0x0010:  0148 0000 0000 4011 b2e6 c0a8 0607 ffff  .H....@.........
   0x0020:  ffff 0043 0044 0134 22f6 0201 0600 03c1  ...C.D.4".......
   0x0030:  423c 0400 8000 0000 0000 c0a8 0603 c0a8  B<..............
   0x0040:  0607 0000 0000 0001 02c1 423c 0000 0000  ..........B<....
   0x0050:  0000 0000 0000 0000 0000 0000 0000 0000  ................
15:06:31.510266 arp who-has 192.168.6.7 tell 192.168.6.3
   0x0000:  ffff ffff ffff 0001 02c1 423c 0806 0001  ..........B<....
   0x0010:  0800 0604 0001 0001 02c1 423c c0a8 0603  ..........B<....
   0x0020:  0000 0000 0000 c0a8 0607 0000 0000 0000  ................
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:06:31.510659 arp reply 192.168.6.7 is-at 00:05:02:40:5b:61
   0x0000:  0001 02c1 423c 0005 0240 5b61 0806 0001  ....B<...@[a....
   0x0010:  0800 0604 0002 0005 0240 5b61 c0a8 0607  .........@[a....
   0x0020:  0001 02c1 423c c0a8 0603                 ....B<....
15:06:31.510986 IP (tos 0x0, ttl 20, id 2, offset 0, flags [none], length: 52) 192.168.6.3.2070 > 192.168.6.7.69: [udp sum ok] 24 RRQ "pxegrub" octet tsize 0
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0034 0002 0000 1411 195d c0a8 0603 c0a8  .4.......]......
   0x0020:  0607 0816 0045 0020 f4e9 0001 7078 6567  .....E......pxeg
   0x0030:  7275 6200 6f63 7465 7400 7473 697a 6500  rub.octet.tsize.
   0x0040:  3000                                     0.
15:06:31.797940 IP (tos 0x0, ttl 64, id 20275, offset 0, flags [none], length: 43) 192.168.6.7.1067 > 192.168.6.3.2070: [udp sum ok] UDP, length: 15
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  002b 4f33 0000 4011 9e34 c0a8 0607 c0a8  .+O3..@..4......
   0x0020:  0603 042b 0816 0017 8890 0006 7473 697a  ...+........tsiz
   0x0030:  6500 3139 3932 3034 00                   e.199204.
15:06:31.798381 IP (tos 0x0, ttl 20, id 3, offset 0, flags [none], length: 45) 192.168.6.3.2070 > 192.168.6.7.1067: [udp sum ok] UDP, length: 17
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  002d 0003 0000 1411 1963 c0a8 0603 c0a8  .-.......c......
   0x0020:  0607 0816 042b 0019 62fb 0005 0000 5446  .....+..b.....TF
   0x0030:  5450 2041 626f 7274 6564 0000            TP.Aborted..
15:06:31.798454 IP (tos 0x0, ttl 20, id 4, offset 0, flags [none], length: 57) 192.168.6.3.2071 > 192.168.6.7.69: [udp sum ok] 29 RRQ "pxegrub" octet blksize 1456
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0039 0004 0000 1411 1956 c0a8 0603 c0a8  .9.......V......
   0x0020:  0607 0817 0045 0025 6508 0001 7078 6567  .....E.%e...pxeg
   0x0030:  7275 6200 6f63 7465 7400 626c 6b73 697a  rub.octet.blksiz
   0x0040:  6500 3134 3536 00                        e.1456.
15:06:31.852592 IP (tos 0x0, ttl 64, id 20276, offset 0, flags [none], length: 43) 192.168.6.7.1067 > 192.168.6.3.2071: [udp sum ok] UDP, length: 15
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  002b 4f34 0000 4011 9e33 c0a8 0607 c0a8  .+O4..@..3......
   0x0020:  0603 042b 0817 0017 6358 0006 626c 6b73  ...+....cX..blks
   0x0030:  697a 6500 3134 3536 00                   ize.1456.
15:06:31.853021 IP (tos 0x0, ttl 20, id 5, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 0005 0000 1411 196e c0a8 0603 c0a8  .........n......
   0x0020:  0607 0817 042b 000c 6635 0004 0000 0000  .....+..f5......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:06:31.866307 IP (tos 0x0, ttl 64, id 20277, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f35 0000 4011 988d c0a8 0607 c0a8  ..O5..@.........
   0x0020:  0603 042b 0817 05bc eed3 0003 0001 ea00  ...+............
   0x0030:  8200 0000 0000 0000 0000 0000 0000 0000  ................
   0x0040:  0000 0000 0000 0000 0000 0000 0000 0000  ................
   0x0050:  0000 0000 0000 0000 0000 0000 0000 0000  ................
15:06:36.789292 arp who-has 192.168.6.3 tell 192.168.6.7
   0x0000:  0001 02c1 423c 0005 0240 5b61 0806 0001  ....B<...@[a....
   0x0010:  0800 0604 0001 0005 0240 5b61 c0a8 0607  .........@[a....
   0x0020:  0000 0000 0000 c0a8 0603                 ..........
15:06:36.789723 arp reply 192.168.6.3 is-at 00:01:02:c1:42:3c
   0x0000:  0005 0240 5b61 0001 02c1 423c 0806 0001  ...@[a....B<....
   0x0010:  0800 0604 0002 0001 02c1 423c c0a8 0603  ..........B<....
   0x0020:  0005 0240 5b61 c0a8 0607 0000 0000 0000  ...@[a..........
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:06:36.874875 IP (tos 0x0, ttl 64, id 20278, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f36 0000 4011 988c c0a8 0607 c0a8  ..O6..@.........
   0x0020:  0603 042b 0817 05bc eed3 0003 0001 ea00  ...+............
   0x0030:  8200 0000 0000 0000 0000 0000 0000 0000  ................
   0x0040:  0000 0000 0000 0000 0000 0000 0000 0000  ................
   0x0050:  0000 0000 0000 0000 0000 0000 0000 0000  ................
15:06:36.876691 IP (tos 0x0, ttl 20, id 6, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 0006 0000 1411 196d c0a8 0603 c0a8  .........m......
   0x0020:  0607 0817 042b 000c 6634 0004 0001 0000  .....+..f4......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:06:36.892514 IP (tos 0x0, ttl 64, id 20279, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f37 0000 4011 988b c0a8 0607 c0a8  ..O7..@.........
   0x0020:  0603 042b 0817 05bc 37ae 0003 0002 0000  ...+....7.......
   0x0030:  0000 0000 0000 0000 0000 0000 0000 0000  ................
   0x0040:  0000 0000 0000 0000 0000 0000 0000 0000  ................
   0x0050:  0000 0000 0000 0000 0000 0000 0000 0000  ................
15:06:37.141571 IP (tos 0x0, ttl 20, id 7, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 0007 0000 1411 196c c0a8 0603 c0a8  .........l......
   0x0020:  0607 0817 042b 000c 6634 0004 0001 0000  .....+..f4......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:06:37.150762 IP (tos 0x0, ttl 64, id 20280, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f38 0000 4011 988a c0a8 0607 c0a8  ..O8..@.........
   0x0020:  0603 042b 0817 05bc 37ae 0003 0002 0000  ...+....7.......
   0x0030:  0000 0000 0000 0000 0000 0000 0000 0000  ................
   0x0040:  0000 0000 0000 0000 0000 0000 0000 0000  ................
   0x0050:  0000 0000 0000 0000 0000 0000 0000 0000  ................
15:06:39.393686 IP (tos 0x0, ttl 20, id 8, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 0008 0000 1411 196b c0a8 0603 c0a8  .........k......
   0x0020:  0607 0817 042b 000c 6634 0004 0001 0000  .....+..f4......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:06:39.404189 IP (tos 0x0, ttl 64, id 20281, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f39 0000 4011 9889 c0a8 0607 c0a8  ..O9..@.........
   0x0020:  0603 042b 0817 05bc 37ae 0003 0002 0000  ...+....7.......
   0x0030:  0000 0000 0000 0000 0000 0000 0000 0000  ................
   0x0040:  0000 0000 0000 0000 0000 0000 0000 0000  ................
   0x0050:  0000 0000 0000 0000 0000 0000 0000 0000  ................
15:06:43.623233 IP (tos 0x0, ttl 20, id 9, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 0009 0000 1411 196a c0a8 0603 c0a8  .........j......
   0x0020:  0607 0817 042b 000c 6634 0004 0001 0000  .....+..f4......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:06:43.627711 IP (tos 0x0, ttl 64, id 20282, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f3a 0000 4011 9888 c0a8 0607 c0a8  ..O:..@.........
   0x0020:  0603 042b 0817 05bc 37ae 0003 0002 0000  ...+....7.......
   0x0030:  0000 0000 0000 0000 0000 0000 0000 0000  ................
   0x0040:  0000 0000 0000 0000 0000 0000 0000 0000  ................
   0x0050:  0000 0000 0000 0000 0000 0000 0000 0000  ................
15:06:48.631138 IP (tos 0x0, ttl 64, id 20283, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f3b 0000 4011 9887 c0a8 0607 c0a8  ..O;..@.........
   0x0020:  0603 042b 0817 05bc 37ae 0003 0002 0000  ...+....7.......
   0x0030:  0000 0000 0000 0000 0000 0000 0000 0000  ................
   0x0040:  0000 0000 0000 0000 0000 0000 0000 0000  ................
   0x0050:  0000 0000 0000 0000 0000 0000 0000 0000  ................
15:06:49.830255 IP (tos 0x0, ttl 20, id 10, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 000a 0000 1411 1969 c0a8 0603 c0a8  .........i......
   0x0020:  0607 0817 042b 000c 6634 0004 0001 0000  .....+..f4......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:06:49.834830 IP (tos 0x0, ttl 64, id 20284, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f3c 0000 4011 9886 c0a8 0607 c0a8  ..O<..@.........
   0x0020:  0603 042b 0817 05bc 37ae 0003 0002 0000  ...+....7.......
   0x0030:  0000 0000 0000 0000 0000 0000 0000 0000  ................
   0x0040:  0000 0000 0000 0000 0000 0000 0000 0000  ................
   0x0050:  0000 0000 0000 0000 0000 0000 0000 0000  ................
15:06:54.831117 IP (tos 0x0, ttl 64, id 20285, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f3d 0000 4011 9885 c0a8 0607 c0a8  ..O=..@.........
   0x0020:  0603 042b 0817 05bc 37ae 0003 0002 0000  ...+....7.......
   0x0030:  0000 0000 0000 0000 0000 0000 0000 0000  ................
   0x0040:  0000 0000 0000 0000 0000 0000 0000 0000  ................
   0x0050:  0000 0000 0000 0000 0000 0000 0000 0000  ................
15:06:54.832929 IP (tos 0x0, ttl 20, id 11, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 000b 0000 1411 1968 c0a8 0603 c0a8  .........h......
   0x0020:  0607 0817 042b 000c 6633 0004 0002 0000  .....+..f3......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:06:54.840213 IP (tos 0x0, ttl 64, id 20286, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f3e 0000 4011 9884 c0a8 0607 c0a8  ..O>..@.........
   0x0020:  0603 042b 0817 05bc 2071 0003 0003 0f01  ...+.....q......
   0x0030:  152c 9000 000f 20c0 6683 c801 0f22 c066  .,......f....".f
   0x0040:  ea79 8700 0008 0066 b810 008e d88e c08e  .y.....f........
   0x0050:  e08e e88e d08b 0424 a3f0 1f00 00a1 e08f  .......$........
15:06:55.103497 IP (tos 0x0, ttl 20, id 12, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 000c 0000 1411 1967 c0a8 0603 c0a8  .........g......
   0x0020:  0607 0817 042b 000c 6633 0004 0002 0000  .....+..f3......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:06:55.108720 IP (tos 0x0, ttl 64, id 20287, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f3f 0000 4011 9883 c0a8 0607 c0a8  ..O?..@.........
   0x0020:  0603 042b 0817 05bc 2071 0003 0003 0f01  ...+.....q......
   0x0030:  152c 9000 000f 20c0 6683 c801 0f22 c066  .,......f....".f
   0x0040:  ea79 8700 0008 0066 b810 008e d88e c08e  .y.....f........
   0x0050:  e08e e88e d08b 0424 a3f0 1f00 00a1 e08f  .......$........
15:06:57.355610 IP (tos 0x0, ttl 20, id 13, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 000d 0000 1411 1966 c0a8 0603 c0a8  .........f......
   0x0020:  0607 0817 042b 000c 6633 0004 0002 0000  .....+..f3......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:06:57.360943 IP (tos 0x0, ttl 64, id 20288, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f40 0000 4011 9882 c0a8 0607 c0a8  ..O@..@.........
   0x0020:  0603 042b 0817 05bc 2071 0003 0003 0f01  ...+.....q......
   0x0030:  152c 9000 000f 20c0 6683 c801 0f22 c066  .,......f....".f
   0x0040:  ea79 8700 0008 0066 b810 008e d88e c08e  .y.....f........
   0x0050:  e08e e88e d08b 0424 a3f0 1f00 00a1 e08f  .......$........
15:06:57.362713 IP (tos 0x0, ttl 20, id 14, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 000e 0000 1411 1965 c0a8 0603 c0a8  .........e......
   0x0020:  0607 0817 042b 000c 6632 0004 0003 0000  .....+..f2......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:06:57.369414 IP (tos 0x0, ttl 64, id 20289, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f41 0000 4011 9881 c0a8 0607 c0a8  ..OA..@.........
   0x0020:  0603 042b 0817 05bc f058 0003 0004 0000  ...+.....X......
   0x0030:  0000 0000 0000 0000 0000 0000 0000 0000  ................
   0x0040:  0000 0000 0000 0000 0000 0000 0000 0000  ................
   0x0050:  0000 0000 0000 0000 0000 0000 0000 0000  ................
15:06:57.371176 IP (tos 0x0, ttl 20, id 15, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 000f 0000 1411 1964 c0a8 0603 c0a8  .........d......
   0x0020:  0607 0817 042b 000c 6631 0004 0004 0000  .....+..f1......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:06:57.377841 IP (tos 0x0, ttl 64, id 20290, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f42 0000 4011 9880 c0a8 0607 c0a8  ..OB..@.........
   0x0020:  0603 042b 0817 05bc 6224 0003 0005 4f52  ...+....b$....OR
   0x0030:  e475 42f7 c200 0001 0074 0583 f91f 7e35  .uB......t....~5
   0x0040:  f6c2 0474 0583 f92f 7e2b 8995 d0df ffff  ...t.../~+......
   0x0050:  66f7 85d0 dfff fff8 ff0f 8558 0f00 00c7  f..........X....
15:06:57.630231 IP (tos 0x0, ttl 20, id 16, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 0010 0000 1411 1963 c0a8 0603 c0a8  .........c......
   0x0020:  0607 0817 042b 000c 6631 0004 0004 0000  .....+..f1......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:06:57.634684 IP (tos 0x0, ttl 64, id 20291, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f43 0000 4011 987f c0a8 0607 c0a8  ..OC..@.........
   0x0020:  0603 042b 0817 05bc 6224 0003 0005 4f52  ...+....b$....OR
   0x0030:  e475 42f7 c200 0001 0074 0583 f91f 7e35  .uB......t....~5
   0x0040:  f6c2 0474 0583 f92f 7e2b 8995 d0df ffff  ...t.../~+......
   0x0050:  66f7 85d0 dfff fff8 ff0f 8558 0f00 00c7  f..........X....
15:06:59.882346 IP (tos 0x0, ttl 20, id 17, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 0011 0000 1411 1962 c0a8 0603 c0a8  .........b......
   0x0020:  0607 0817 042b 000c 6631 0004 0004 0000  .....+..f1......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:06:59.886845 IP (tos 0x0, ttl 64, id 20292, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f44 0000 4011 987e c0a8 0607 c0a8  ..OD..@..~......
   0x0020:  0603 042b 0817 05bc 6224 0003 0005 4f52  ...+....b$....OR
   0x0030:  e475 42f7 c200 0001 0074 0583 f91f 7e35  .uB......t....~5
   0x0040:  f6c2 0474 0583 f92f 7e2b 8995 d0df ffff  ...t.../~+......
   0x0050:  66f7 85d0 dfff fff8 ff0f 8558 0f00 00c7  f..........X....
15:07:04.111914 IP (tos 0x0, ttl 20, id 18, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 0012 0000 1411 1961 c0a8 0603 c0a8  .........a......
   0x0020:  0607 0817 042b 000c 6631 0004 0004 0000  .....+..f1......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:07:04.116526 IP (tos 0x0, ttl 64, id 20293, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f45 0000 4011 987d c0a8 0607 c0a8  ..OE..@..}......
   0x0020:  0603 042b 0817 05bc 6224 0003 0005 4f52  ...+....b$....OR
   0x0030:  e475 42f7 c200 0001 0074 0583 f91f 7e35  .uB......t....~5
   0x0040:  f6c2 0474 0583 f92f 7e2b 8995 d0df ffff  ...t.../~+......
   0x0050:  66f7 85d0 dfff fff8 ff0f 8558 0f00 00c7  f..........X....
15:07:09.121146 IP (tos 0x0, ttl 64, id 20294, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f46 0000 4011 987c c0a8 0607 c0a8  ..OF..@..|......
   0x0020:  0603 042b 0817 05bc 6224 0003 0005 4f52  ...+....b$....OR
   0x0030:  e475 42f7 c200 0001 0074 0583 f91f 7e35  .uB......t....~5
   0x0040:  f6c2 0474 0583 f92f 7e2b 8995 d0df ffff  ...t.../~+......
   0x0050:  66f7 85d0 dfff fff8 ff0f 8558 0f00 00c7  f..........X....
15:07:10.318943 IP (tos 0x0, ttl 20, id 19, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 0013 0000 1411 1960 c0a8 0603 c0a8  .........`......
   0x0020:  0607 0817 042b 000c 6631 0004 0004 0000  .....+..f1......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:07:10.321523 IP (tos 0x0, ttl 64, id 20295, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f47 0000 4011 987b c0a8 0607 c0a8  ..OG..@..{......
   0x0020:  0603 042b 0817 05bc 6224 0003 0005 4f52  ...+....b$....OR
   0x0030:  e475 42f7 c200 0001 0074 0583 f91f 7e35  .uB......t....~5
   0x0040:  f6c2 0474 0583 f92f 7e2b 8995 d0df ffff  ...t.../~+......
   0x0050:  66f7 85d0 dfff fff8 ff0f 8558 0f00 00c7  f..........X....
15:07:10.323308 IP (tos 0x0, ttl 20, id 20, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 0014 0000 1411 195f c0a8 0603 c0a8  ........._......
   0x0020:  0607 0817 042b 000c 6630 0004 0005 0000  .....+..f0......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:07:10.326444 IP (tos 0x0, ttl 64, id 20296, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f48 0000 4011 987a c0a8 0607 c0a8  ..OH..@..z......
   0x0020:  0603 042b 0817 05bc 3615 0003 0006 0083  ...+....6.......
   0x0030:  c418 85c0 0f84 9400 0000 83c0 0450 6877  .............Phw
   0x0040:  bd02 0089 85ec dfff ffe8 755a 0000 85c0  ..........uZ....
   0x0050:  5b5a 7f0c c785 f0df ffff ffff 0000 eb61  [Z.............a
15:07:10.593576 IP (tos 0x0, ttl 20, id 21, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 0015 0000 1411 195e c0a8 0603 c0a8  .........^......
   0x0020:  0607 0817 042b 000c 6630 0004 0005 0000  .....+..f0......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:07:10.596642 IP (tos 0x0, ttl 64, id 20297, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f49 0000 4011 9879 c0a8 0607 c0a8  ..OI..@..y......
   0x0020:  0603 042b 0817 05bc 3615 0003 0006 0083  ...+....6.......
   0x0030:  c418 85c0 0f84 9400 0000 83c0 0450 6877  .............Phw
   0x0040:  bd02 0089 85ec dfff ffe8 755a 0000 85c0  ..........uZ....
   0x0050:  5b5a 7f0c c785 f0df ffff ffff 0000 eb61  [Z.............a
15:07:12.845700 IP (tos 0x0, ttl 20, id 22, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 0016 0000 1411 195d c0a8 0603 c0a8  .........]......
   0x0020:  0607 0817 042b 000c 6630 0004 0005 0000  .....+..f0......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:07:12.849135 IP (tos 0x0, ttl 64, id 20298, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f4a 0000 4011 9878 c0a8 0607 c0a8  ..OJ..@..x......
   0x0020:  0603 042b 0817 05bc 3615 0003 0006 0083  ...+....6.......
   0x0030:  c418 85c0 0f84 9400 0000 83c0 0450 6877  .............Phw
   0x0040:  bd02 0089 85ec dfff ffe8 755a 0000 85c0  ..........uZ....
   0x0050:  5b5a 7f0c c785 f0df ffff ffff 0000 eb61  [Z.............a
15:07:17.075241 IP (tos 0x0, ttl 20, id 23, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 0017 0000 1411 195c c0a8 0603 c0a8  .........\......
   0x0020:  0607 0817 042b 000c 6630 0004 0005 0000  .....+..f0......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:07:17.078595 IP (tos 0x0, ttl 64, id 20299, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f4b 0000 4011 9877 c0a8 0607 c0a8  ..OK..@..w......
   0x0020:  0603 042b 0817 05bc 3615 0003 0006 0083  ...+....6.......
   0x0030:  c418 85c0 0f84 9400 0000 83c0 0450 6877  .............Phw
   0x0040:  bd02 0089 85ec dfff ffe8 755a 0000 85c0  ..........uZ....
   0x0050:  5b5a 7f0c c785 f0df ffff ffff 0000 eb61  [Z.............a
15:07:22.081926 IP (tos 0x0, ttl 64, id 20300, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f4c 0000 4011 9876 c0a8 0607 c0a8  ..OL..@..v......
   0x0020:  0603 042b 0817 05bc 3615 0003 0006 0083  ...+....6.......
   0x0030:  c418 85c0 0f84 9400 0000 83c0 0450 6877  .............Phw
   0x0040:  bd02 0089 85ec dfff ffe8 755a 0000 85c0  ..........uZ....
   0x0050:  5b5a 7f0c c785 f0df ffff ffff 0000 eb61  [Z.............a
15:07:23.282263 IP (tos 0x0, ttl 20, id 24, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 0018 0000 1411 195b c0a8 0603 c0a8  .........[......
   0x0020:  0607 0817 042b 000c 6630 0004 0005 0000  .....+..f0......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:07:23.287475 IP (tos 0x0, ttl 64, id 20301, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f4d 0000 4011 9875 c0a8 0607 c0a8  ..OM..@..u......
   0x0020:  0603 042b 0817 05bc 3615 0003 0006 0083  ...+....6.......
   0x0030:  c418 85c0 0f84 9400 0000 83c0 0450 6877  .............Phw
   0x0040:  bd02 0089 85ec dfff ffe8 755a 0000 85c0  ..........uZ....
   0x0050:  5b5a 7f0c c785 f0df ffff ffff 0000 eb61  [Z.............a
15:07:23.289293 IP (tos 0x0, ttl 20, id 25, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 0019 0000 1411 195a c0a8 0603 c0a8  .........Z......
   0x0020:  0607 0817 042b 000c 662f 0004 0006 0000  .....+..f/......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:07:23.291684 IP (tos 0x0, ttl 64, id 20302, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f4e 0000 4011 9874 c0a8 0607 c0a8  ..ON..@..t......
   0x0020:  0603 042b 0817 05bc 7cf5 0003 0007 0300  ...+....|.......
   0x0030:  8910 8b85 e4df ffff a380 c305 0083 e804  ................
   0x0040:  5068 e2bd 0200 8305 4086 0300 0489 85e4  Ph......@.......
   0x0050:  dfff ffe8 2547 0000 ffb5 e4df ffff ff35  ....%G.........5
15:07:23.556932 IP (tos 0x0, ttl 20, id 26, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 001a 0000 1411 1959 c0a8 0603 c0a8  .........Y......
   0x0020:  0607 0817 042b 000c 662f 0004 0006 0000  .....+..f/......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:07:23.561349 IP (tos 0x0, ttl 64, id 20303, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f4f 0000 4011 9873 c0a8 0607 c0a8  ..OO..@..s......
   0x0020:  0603 042b 0817 05bc 7cf5 0003 0007 0300  ...+....|.......
   0x0030:  8910 8b85 e4df ffff a380 c305 0083 e804  ................
   0x0040:  5068 e2bd 0200 8305 4086 0300 0489 85e4  Ph......@.......
   0x0050:  dfff ffe8 2547 0000 ffb5 e4df ffff ff35  ....%G.........5
15:07:25.809038 IP (tos 0x0, ttl 20, id 27, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 001b 0000 1411 1958 c0a8 0603 c0a8  .........X......
   0x0020:  0607 0817 042b 000c 662f 0004 0006 0000  .....+..f/......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:07:25.811709 IP (tos 0x0, ttl 64, id 20304, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f50 0000 4011 9872 c0a8 0607 c0a8  ..OP..@..r......
   0x0020:  0603 042b 0817 05bc 7cf5 0003 0007 0300  ...+....|.......
   0x0030:  8910 8b85 e4df ffff a380 c305 0083 e804  ................
   0x0040:  5068 e2bd 0200 8305 4086 0300 0489 85e4  Ph......@.......
   0x0050:  dfff ffe8 2547 0000 ffb5 e4df ffff ff35  ....%G.........5
15:07:27.079294 arp who-has 192.168.6.3 tell 192.168.6.7
   0x0000:  0001 02c1 423c 0005 0240 5b61 0806 0001  ....B<...@[a....
   0x0010:  0800 0604 0001 0005 0240 5b61 c0a8 0607  .........@[a....
   0x0020:  0000 0000 0000 c0a8 0603                 ..........
15:07:27.079719 arp reply 192.168.6.3 is-at 00:01:02:c1:42:3c
   0x0000:  0005 0240 5b61 0001 02c1 423c 0806 0001  ...@[a....B<....
   0x0010:  0800 0604 0002 0001 02c1 423c c0a8 0603  ..........B<....
   0x0020:  0005 0240 5b61 c0a8 0607 0000 0000 0000  ...@[a..........
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:07:30.038617 IP (tos 0x0, ttl 20, id 28, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 001c 0000 1411 1957 c0a8 0603 c0a8  .........W......
   0x0020:  0607 0817 042b 000c 662f 0004 0006 0000  .....+..f/......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:07:30.041303 IP (tos 0x0, ttl 64, id 20305, offset 0, flags [none], length: 1488) 192.168.6.7.1067 > 192.168.6.3.2071: UDP, length: 1460
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 4500  ....B<...@[a..E.
   0x0010:  05d0 4f51 0000 4011 9871 c0a8 0607 c0a8  ..OQ..@..q......
   0x0020:  0603 042b 0817 05bc 7cf5 0003 0007 0300  ...+....|.......
   0x0030:  8910 8b85 e4df ffff a380 c305 0083 e804  ................
   0x0040:  5068 e2bd 0200 8305 4086 0300 0489 85e4  Ph......@.......
   0x0050:  dfff ffe8 2547 0000 ffb5 e4df ffff ff35  ....%G.........5
15:07:36.245620 IP (tos 0x0, ttl 20, id 29, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 001d 0000 1411 1956 c0a8 0603 c0a8  .........V......
   0x0020:  0607 0817 042b 000c 662f 0004 0006 0000  .....+..f/......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:07:36.246322 IP (tos 0xc0, ttl 64, id 20306, offset 0, flags [none], length: 60) 192.168.6.7 > 192.168.6.3: icmp 40: 192.168.6.7 udp port 1067 unreachable for IP (tos 0x0, ttl 20, id 29, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 45c0  ....B<...@[a..E.
   0x0010:  003c 4f52 0000 4001 9d54 c0a8 0607 c0a8  .<OR..@..T......
   0x0020:  0603 0303 8a75 0000 0000 4500 0020 001d  .....u....E.....
   0x0030:  0000 1411 1956 c0a8 0603 c0a8 0607 0817  .....V..........
   0x0040:  042b 000c 662f 0004 0006                 .+..f/....
15:07:44.430069 IP (tos 0x0, ttl 20, id 30, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 001e 0000 1411 1955 c0a8 0603 c0a8  .........U......
   0x0020:  0607 0817 042b 000c 662f 0004 0006 0000  .....+..f/......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:07:44.430687 IP (tos 0xc0, ttl 64, id 20307, offset 0, flags [none], length: 60) 192.168.6.7 > 192.168.6.3: icmp 40: 192.168.6.7 udp port 1067 unreachable for IP (tos 0x0, ttl 20, id 30, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 45c0  ....B<...@[a..E.
   0x0010:  003c 4f53 0000 4001 9d53 c0a8 0607 c0a8  .<OS..@..S......
   0x0020:  0603 0303 8a75 0000 0000 4500 0020 001e  .....u....E.....
   0x0030:  0000 1411 1955 c0a8 0603 c0a8 0607 0817  .....U..........
   0x0040:  042b 000c 662f 0004 0006                 .+..f/....
15:07:51.721043 arp who-has 192.168.6.1 tell 192.168.6.4
   0x0000:  ffff ffff ffff 0800 079e be02 0806 0001  ................
   0x0010:  0800 0604 0001 0800 079e be02 c0a8 0604  ................
   0x0020:  0000 0000 0000 c0a8 0601 423c c0a8 0603  ..........B<....
   0x0030:  0000 0000 0000 c0a8 0607 0000            ............
15:07:54.592010 IP (tos 0x0, ttl 20, id 31, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 001f 0000 1411 1954 c0a8 0603 c0a8  .........T......
   0x0020:  0607 0817 042b 000c 662f 0004 0006 0000  .....+..f/......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:07:54.592714 IP (tos 0xc0, ttl 64, id 20308, offset 0, flags [none], length: 60) 192.168.6.7 > 192.168.6.3: icmp 40: 192.168.6.7 udp port 1067 unreachable for IP (tos 0x0, ttl 20, id 31, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 45c0  ....B<...@[a..E.
   0x0010:  003c 4f54 0000 4001 9d52 c0a8 0607 c0a8  .<OT..@..R......
   0x0020:  0603 0303 8a75 0000 0000 4500 0020 001f  .....u....E.....
   0x0030:  0000 1411 1954 c0a8 0603 c0a8 0607 0817  .....T..........
   0x0040:  042b 000c 662f 0004 0006                 .+..f/....
15:08:06.731414 IP (tos 0x0, ttl 20, id 32, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 0020 0000 1411 1953 c0a8 0603 c0a8  .........S......
   0x0020:  0607 0817 042b 000c 662f 0004 0006 0000  .....+..f/......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:08:06.732104 IP (tos 0xc0, ttl 64, id 20309, offset 0, flags [none], length: 60) 192.168.6.7 > 192.168.6.3: icmp 40: 192.168.6.7 udp port 1067 unreachable for IP (tos 0x0, ttl 20, id 32, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 45c0  ....B<...@[a..E.
   0x0010:  003c 4f55 0000 4001 9d51 c0a8 0607 c0a8  .<OU..@..Q......
   0x0020:  0603 0303 8a75 0000 0000 4500 0020 0020  .....u....E.....
   0x0030:  0000 1411 1953 c0a8 0603 c0a8 0607 0817  .....S..........
   0x0040:  042b 000c 662f 0004 0006                 .+..f/....
15:08:20.848274 IP (tos 0x0, ttl 20, id 33, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0005 0240 5b61 0001 02c1 423c 0800 4500  ...@[a....B<..E.
   0x0010:  0020 0021 0000 1411 1952 c0a8 0603 c0a8  ...!.....R......
   0x0020:  0607 0817 042b 000c 662f 0004 0006 0000  .....+..f/......
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:08:20.848982 IP (tos 0xc0, ttl 64, id 20310, offset 0, flags [none], length: 60) 192.168.6.7 > 192.168.6.3: icmp 40: 192.168.6.7 udp port 1067 unreachable for IP (tos 0x0, ttl 20, id 33, offset 0, flags [none], length: 32) 192.168.6.3.2071 > 192.168.6.7.1067: [udp sum ok] UDP, length: 4
   0x0000:  0001 02c1 423c 0005 0240 5b61 0800 45c0  ....B<...@[a..E.
   0x0010:  003c 4f56 0000 4001 9d50 c0a8 0607 c0a8  .<OV..@..P......
   0x0020:  0603 0303 8a75 0000 0000 4500 0020 0021  .....u....E....!
   0x0030:  0000 1411 1952 c0a8 0603 c0a8 0607 0817  .....R..........
   0x0040:  042b 000c 662f 0004 0006                 .+..f/....
15:08:25.839295 arp who-has 192.168.6.3 tell 192.168.6.7
   0x0000:  0001 02c1 423c 0005 0240 5b61 0806 0001  ....B<...@[a....
   0x0010:  0800 0604 0001 0005 0240 5b61 c0a8 0607  .........@[a....
   0x0020:  0000 0000 0000 c0a8 0603                 ..........
15:08:25.839714 arp reply 192.168.6.3 is-at 00:01:02:c1:42:3c
   0x0000:  0005 0240 5b61 0001 02c1 423c 0806 0001  ...@[a....B<....
   0x0010:  0800 0604 0002 0001 02c1 423c c0a8 0603  ..........B<....
   0x0020:  0005 0240 5b61 c0a8 0607 0000 0000 0000  ...@[a..........
   0x0030:  0000 0000 0000 0000 0000 0000            ............
15:08:54.579266 IP (tos 0x10, ttl 64, id 45294, offset 0, flags [DF], length: 100) 192.168.6.2.46763 > 192.168.6.7.22: P 1:49(48) ack 160 win 9232 <nop,nop,timestamp 434799683 75305949>
   0x0000:  0005 0240 5b61 0050 2ca3 f8c0 0800 4510  ...@[a.P,.....E.
   0x0010:  0064 b0ee 4000 4006 fc3b c0a8 0602 c0a8  .d..@.@..;......
   0x0020:  0607 b6ab 0016 4ba5 1a6a 4bde 96b3 8018  ......K..jK.....
   0x0030:  2410 dd13 0000 0101 080a 19ea 8443 047d  $............C.}
   0x0040:  13dd 3eff 2fca e57c b502 4a9d c03b 47da  ..>./..|..J..;G.
   0x0050:  766a b959 0bbe d9b2 b2fe d0a6 de76 7931  vj.Y.........vy1
[/SNIP]

Forgive me if this is a bit too verbose, I am not going to be using the 3com card that is problematic, and might not be able to test any fixes to the problem. Want to give as much info as I can.

- Eric




Reply to: