OPNsense Forum

Archive => 21.1 Legacy Series => Topic started by: ingof on February 24, 2021, 01:13:11 am

Title: opnsese forwards packets not addressed to its own mac(s)
Post by: ingof on February 24, 2021, 01:13:11 am: I have a HA setup with carp running 2 opnsense on a vmware exi5.5 cluster.
Side effect of esxi is, that promiscuous mode needs to be enabled at esxi virtual switch.

I have following effect now:
Host "C" and "D" are at the same Wan network as the firewall "A"(active) and "B"(backup).
Host "D" and firewall "B" resides at the same esxi.

Host "C" sends a icmp packet to Host "D".
Firewall B also receives the packet (because of promiscuous) and forwards it to Host "D".
The packet firewall "B" accepted from host "C" has the mac address of host "D" in the destination (!) and forwards it then via wan interface to host "D" - with own source mac and destination mac of "D".

Why does the firewall accept a packet not intended for the firewall itself?
This should never ever happen.

please see attached log
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: smyers119 on February 25, 2021, 02:22:57 pm: Quote from: ingof on February 24, 2021, 01:13:11 am
Why does the firewall accept a packet not intended for the firewall itself?
This should never ever happen.

What your complaining about is the exact meaning of promiscuous mode, that's what it does to a T.

You can try blocking icmp to your wan with source ip not equal to self.
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: ingof on February 25, 2021, 04:27:46 pm: I use Carp but don't want that the FW pickup and forward various traffic which is not intended for it.
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: smyers119 on February 25, 2021, 05:52:19 pm: Quote from: ingof on February 25, 2021, 04:27:46 pm
I use Carp but don't want that the FW pickup and forward various traffic which is not intended for it.

The firewall rule should stop that. Just add both ip's the above suggested firewall rule.
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: ingof on February 25, 2021, 07:03:19 pm: In a carp/failover environment the backup firewall would still forward wrong packets and produce duplicate packets.
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: smyers119 on February 25, 2021, 07:05:52 pm: Quote from: ingof on February 25, 2021, 07:03:19 pm
In a carp/failover environment the backup firewall would still forward wrong packets and produce duplicate packets.
Not if there is a firewall rule blocking icmp with the correct exclusions as already described above. Not sure how more clear i can explain it.
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: ingof on February 25, 2021, 07:09:00 pm: Traffic allowed from virtual IP A wan to lan (one-to-one-nat).
Firewall A (active) should forward to lan.
Firewall B (backup) would also forward the traffic also to lan in a "hub" ethernet environment.
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: smyers119 on February 25, 2021, 07:23:55 pm: Quote from: ingof on February 25, 2021, 07:09:00 pm
Traffic allowed from virtual IP A wan to lan (one-to-one-nat).
Firewall A (active) should forward to lan.
Firewall B (backup) would also forward the traffic also to lan in a "hub" ethernet environment.

That's a completely different scenario.

#1 there's no hub, it's a switch.

#2 Your trying to compare unicast tcp/udp traffic with icmp traffic, it's two completely different things, so firewall b would never do that.
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: ingof on February 25, 2021, 07:29:52 pm: #1 this is mentioned in first post
#2 icmp in kernel gets same forwarded as udp/tcp. Fun fact here is - there are also all udp/tcp states synced from the active one.
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: smyers119 on February 25, 2021, 07:35:23 pm: Quote from: ingof on February 25, 2021, 07:29:52 pm
#1 this is mentioned in first post
#2 icmp in kernel gets same forwarded as udp/tcp. Fun fact here is - there are also all udp/tcp states synced from the active one.

Do you have a pcap of this happening?
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: smyers119 on February 25, 2021, 07:38:04 pm: try this and see if it works, (this isn't a opnsense problem):

Quote
esxcli system settings advanced set -o /Net/ReversePathFwdCheckPromisc -i 1
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: ingof on February 25, 2021, 07:38:26 pm: See first post.
And I do a testsetup with opnsense and freebsd 12 now.
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: ingof on February 25, 2021, 07:39:53 pm: Quote from: smyers119 on February 25, 2021, 07:38:04 pm
try this and see if it works:

Quote
esxcli system settings advanced set -o /Net/ReversePathFwdCheckPromisc -i 1

been there - done that.
This affects broadcast/multicast only.
Without this option carp does not work at all as FW A gets their own carp multicast packets back.
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: smyers119 on February 25, 2021, 07:41:36 pm: Quote from: ingof on February 25, 2021, 07:38:26 pm
See first post.
And I do a testsetup with opnsense and freebsd 12 now.
#1 first post does not have a pcap.

#2 i posted the solution above

#3 i asked for pcap of unicast traffic duplication
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: smyers119 on February 25, 2021, 07:52:56 pm: Do you have

"Forged Transmits" and "Mac Address changes" enabled as well?
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: smyers119 on February 25, 2021, 07:57:47 pm: Are you using VDS?
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: ingof on February 25, 2021, 08:00:29 pm: Quote from: smyers119 on February 25, 2021, 07:52:56 pm
Do you have

"Forged Transmits" and "Mac Address changes" enabled as well?

yes.
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: ingof on February 25, 2021, 08:02:11 pm: Quote from: smyers119 on February 25, 2021, 07:57:47 pm
Are you using VDS?

vmware standard switch
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: smyers119 on February 25, 2021, 08:16:24 pm: Did you turn promisc mode off/on again after changing Net.ReversePathFwdCheckPromisc? (for each vswitch and group)
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: ingof on February 25, 2021, 09:40:44 pm: Quote from: smyers119 on February 25, 2021, 08:16:24 pm
Did you turn promisc mode off/on again after changing Net.ReversePathFwdCheckPromisc? (for each vswitch and group)

I rebootet guest machine as stated in vmware docs.
Also the host machine was rebootet in between.
ReversePathFwdCheckPromisc solves the problem of duplicate broad/multicast. I have duplicate unicast because opnsense at vmware accepts and forwards packets that do not have the fw mac address in destination field.
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: smyers119 on February 26, 2021, 12:15:04 am: Quote from: ingof on February 25, 2021, 09:40:44 pm
Quote from: smyers119 on February 25, 2021, 08:16:24 pm
Did you turn promisc mode off/on again after changing Net.ReversePathFwdCheckPromisc? (for each vswitch and group)

I rebootet guest machine as stated in vmware docs.
Also the host machine was rebootet in between.
ReversePathFwdCheckPromisc solves the problem of duplicate broad/multicast. I have duplicate unicast because opnsense at vmware accepts and forwards packets that do not have the fw mac address in destination field.

You still haven't posted a PCAP
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: ingof on February 26, 2021, 12:36:15 am: Testing results:
Happens only on esxi with promiscuous vswitch, e1000 and carp failover. But there very bad.
As esxi 5.5 is end of support - I don't expect any fixed from vmware or freebsd.

opnsense <> esxi 5.5 - don't use it

ping -c 1 192.168.200.20
result:
Code: [Select]
00:00:10.209898 00:50:56:98:84:7a > 00:50:56:98:59:6f, ethertype IPv4 (0x0800), length 98: 192.168.200.10 > 192.168.200.20: ICMP echo request, id 25797, seq 0, length 64 00:00:10.210002 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.210032 00:50:56:98:76:f4 > 00:50:56:98:59:6f, ethertype IPv4 (0x0800), length 98: 192.168.200.10 > 192.168.200.20: ICMP echo request, id 25797, seq 0, length 64 00:00:10.210049 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.210160 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.210190 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.210204 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.210217 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.210334 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.210354 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.210457 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.210481 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.210492 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.210506 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.210606 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.210626 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.210698 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.210727 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.210746 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.210769 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.210879 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.210903 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.210924 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.210940 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211042 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211065 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211075 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211087 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211199 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211222 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211233 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211245 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211357 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211380 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211430 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211449 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211459 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211472 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211586 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211618 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211661 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211681 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211728 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211747 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211798 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211818 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211831 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211843 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211934 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211956 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211969 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.211981 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212075 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212096 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212107 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212118 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212247 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212280 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212293 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212305 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212399 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212420 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212430 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212442 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212530 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212551 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212565 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212576 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212672 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212694 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212704 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212716 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212826 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212849 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212897 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212917 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212962 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212981 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.212995 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213007 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213187 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213210 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213221 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213232 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213347 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213383 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213404 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213430 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213515 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213537 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213548 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213560 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213643 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213664 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213674 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213686 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213768 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213788 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213799 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213810 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213894 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213916 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213926 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.213938 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214025 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214045 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214058 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214070 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214153 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214173 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214183 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214195 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214287 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214309 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214359 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214377 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214391 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214404 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214479 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214499 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214509 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214522 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214600 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214621 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214665 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214685 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214698 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214710 00:50:56:98:59:6f > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214793 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64 00:00:10.214813 00:50:56:98:76:f4 > 00:50:56:98:84:7a, ethertype IPv4 (0x0800), length 98: 192.168.200.20 > 192.168.200.10: ICMP echo reply, id 25797, seq 0, length 64
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: ingof on February 26, 2021, 12:45:23 am: Udp:
Code: [Select]
01:18:13.498001 00:50:56:98:84:7a > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.498076 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.498194 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.498215 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.498226 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.498239 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.498367 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.498387 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.498398 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.498416 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.498544 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.498565 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.498579 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.498608 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.498689 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.498710 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.498724 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.498741 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.498857 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.498885 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.498899 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.498916 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499027 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499053 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499067 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499084 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499193 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499214 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499228 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499245 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499359 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499381 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499392 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499408 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499525 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499546 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499559 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499577 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499696 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499717 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499728 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499741 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499868 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499889 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499899 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.499912 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.500033 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.500054 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.500064 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.500082 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.500201 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.500228 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.500242 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.500260 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.500377 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.500404 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.500415 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.500432 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.500561 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.500588 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.500599 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.500612 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.500820 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.500845 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.500856 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.500873 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.500988 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.501016 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.501133 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.501154 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.501165 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.501181 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.501304 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.501327 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.501340 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.501358 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.501480 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.501502 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.501516 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.501532 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.501647 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.501670 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.501683 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.501700 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.501817 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.501837 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.501851 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.501867 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.501980 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.502002 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.502016 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.502033 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.502151 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.502173 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.502187 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.502204 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.502319 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.502338 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.502354 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.502370 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.502490 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.502511 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.502591 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.502609 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.502623 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.502640 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.502770 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.502791 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.502801 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.502814 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.503131 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.503157 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.503167 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.503184 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.503286 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.503318 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.503328 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.503346 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.503438 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.503458 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.503469 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.503486 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.503592 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.503613 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.503623 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.503640 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 47: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5 01:18:13.503748 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 60: 192.168.200.10.22368 > 192.168.200.200.2000: UDP, length 5
tcp:
Code: [Select]
01:22:28.243609 00:50:56:98:84:7a > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.243706 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.243722 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.243738 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.243842 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.243865 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.243940 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.243962 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.243982 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244002 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244090 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244111 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244125 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244139 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244233 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244255 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244269 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244283 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244376 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244397 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244411 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244425 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244520 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244541 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244554 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244568 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244660 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244680 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244693 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244712 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244797 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244818 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244832 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244846 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244960 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244981 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.244992 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245005 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245124 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245145 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245160 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245174 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245268 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245288 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245302 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245316 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245405 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245426 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245440 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245454 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245545 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245566 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245580 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245594 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245692 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245712 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245726 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245740 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245831 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245852 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245865 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245880 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245972 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.245993 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.246006 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.246026 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.246107 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.246127 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.246141 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.246155 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.246245 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.246266 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.246279 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.246294 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.246392 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.246413 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.246479 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.246498 00:50:56:98:59:6f > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74: 192.168.200.10.13228 > 192.168.200.200.2000: Flags [S], seq 4085119541, win 65228, options [mss 1460,nop,wscale 7,sackOK,TS val 2396340524 ecr 0], length 0 01:22:28.246511 00:50:56:98:76:f4 > 54:3d:6c:06:70:ee, ethertype IPv4 (0x0800), length 74:
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: smyers119 on February 26, 2021, 02:36:14 pm: None of those tcp/udp packets are duplicated with different mac address's.

EDIT: LOL, apparently I am retarded I see it now!
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: smyers119 on February 26, 2021, 02:40:02 pm: Have you considered updating your esxi?
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: ingof on February 26, 2021, 04:21:38 pm: Quote from: smyers119 on February 26, 2021, 02:40:02 pm
Have you considered updating your esxi?

not my system - so the answer is no.
opnsense now without failover.
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: bimbar on April 14, 2021, 03:13:34 pm: I have the same problem, but didn't find this here thread in time: https://forum.opnsense.org/index.php?topic=22636.0

I updated to ESXi 7.0.1 but this also did not fix it.

This seems to be a bit of a thing with vmware: https://community.cisco.com/t5/switching/vmware-installed-csr1000v-causes-dup-ping-response-from-linux/td-p/2686459
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: ingof on April 15, 2021, 12:07:26 am: Could try another network card, hopefully vmx works better.

Problem seems inside e1000? emulation of vmware, can't reproduce this at real networking hardware.
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: bimbar on April 15, 2021, 12:33:10 am: I tried vmx3 first.

The solution now was to use a dedicated hardware network interface and dedicated vswitches just for the opnsense vm, which works, since now there's always a real switch in the traffic path.

But it's still exactly as you stated, the OS should filter for MAC addresses before accepting packets for routing, and it doesn't seem to do that.
Title: Re: opnsese forwards packets not addressed to its own mac(s)
Post by: ingof on April 15, 2021, 03:27:52 am: Freebsd use filters based at the network-cards if available - there seems something different between real hw and emulated card by vmware.