Ticket #7552: router_wlan0.dump

File router_wlan0.dump, 3.2 KB (added by amain@…, 8 years ago)

tcpdump on wlan0 on router of inital packet after WPA connection setup. See the duplicate packets received, which were not transmitter

Line 
116:09:55.730618 EAPOL key (3) v2, len 95
216:09:55.731309 EAPOL key (3) v1, len 117
316:09:55.738838 EAPOL key (3) v2, len 151
416:09:55.738879 EAPOL key (3) v1, len 95
516:09:57.001322 IP 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:26:5e:1b:05:77, length 300
616:09:57.013390 IP 192.168.1.1.67 > 192.168.1.162.68: BOOTP/DHCP, Reply, length 311
716:09:57.031783 IP 192.168.1.162 > 224.0.0.22: igmp v3 report, 1 group record(s)
816:09:57.243692 IP 192.168.1.162.5353 > 224.0.0.251.5353: 0 [4q] [7n][|domain]
916:09:57.283543 IP 192.168.1.162.5353 > 224.0.0.251.5353: 0*- [0q] 2/0/0[|domain]
1016:09:57.494475 IP 192.168.1.162.5353 > 224.0.0.251.5353: 0 [4q] [7n][|domain]
1116:09:57.745505 IP 192.168.1.162.5353 > 224.0.0.251.5353: 0 [4q] [7n][|domain]
1216:09:57.945964 IP 192.168.1.162.5353 > 224.0.0.251.5353: 0*- [0q] 7/0/0[|domain]
1316:09:58.021722 ARP, Request who-has 192.168.1.1 tell 192.168.1.162, length 28
1416:09:58.024639 ARP, Reply 192.168.1.1 is-at 00:17:31:ed:cf:a0, length 28
1516:09:58.024648 IP 192.168.1.162.57111 > 192.168.1.1.53: 39410+ AAAA? wpad.lan. (26)
1616:09:58.028835 IP 192.168.1.1.53 > 192.168.1.162.57111: 39410 NXDomain 0/0/0 (26)
1716:09:58.028916 IP 192.168.1.162.48071 > 192.168.1.1.53: 40015+ A? wpad.lan. (26)
1816:09:58.032793 IP 192.168.1.1.53 > 192.168.1.162.48071: 40015 NXDomain 0/0/0 (26)
1916:09:58.053617 IP 192.168.1.162.46351 > 192.168.1.1.53: 24298+ SOA? local. (23)
2016:09:58.056918 IP 192.168.1.1.53 > 192.168.1.162.46351: 24298 Refused 0/0/0 (23)
2116:09:58.057068 IP 192.168.1.162.38562 > 192.168.1.1.53: 42571+ SOA? local. (23)
2216:09:58.061073 IP 192.168.1.1.53 > 192.168.1.162.38562: 42571 Refused 0/0/0 (23)
2316:09:58.066849 IP 192.168.1.162.35748 > 192.168.1.1.53: 27586+ AAAA? ntp.ubuntu.com. (32)
2416:09:58.070064 IP 192.168.1.1.53 > 192.168.1.162.35748: 27586 Refused 0/0/0 (32)
2516:09:58.070153 IP 192.168.1.162.54873 > 192.168.1.1.53: 27586+ AAAA? ntp.ubuntu.com. (32)
2616:09:58.076541 IP 192.168.1.1.53 > 192.168.1.162.54873: 27586 Refused 0/0/0 (32)
2716:09:58.076622 IP 192.168.1.162.54320 > 192.168.1.1.53: 21497+ AAAA? ntp.ubuntu.com.lan. (36)
2816:09:58.080729 IP 192.168.1.1.53 > 192.168.1.162.54320: 21497 NXDomain 0/0/0 (36)
2916:09:58.080783 IP 192.168.1.162.48036 > 192.168.1.1.53: 32790+ A? ntp.ubuntu.com. (32)
3016:09:58.085260 IP 192.168.1.1.53 > 192.168.1.162.48036: 32790 Refused 0/0/0 (32)
3116:09:58.085296 IP 192.168.1.162.59457 > 192.168.1.1.53: 32790+ A? ntp.ubuntu.com. (32)
3216:09:58.089077 IP 192.168.1.1.53 > 192.168.1.162.59457: 32790 Refused 0/0/0 (32)
3316:09:58.089113 IP 192.168.1.162.40457 > 192.168.1.1.53: 52840+ A? ntp.ubuntu.com.lan. (36)
3416:09:58.092895 IP 192.168.1.1.53 > 192.168.1.162.40457: 52840 NXDomain 0/0/0 (36)
3516:09:58.458123 IP 192.168.1.162.5353 > 224.0.0.251.5353: 0*- [0q] 6/0/0[|domain]
3616:09:59.120000 IP 192.168.1.162.5353 > 224.0.0.251.5353: 0*- [0q] 7/0/0[|domain]
3716:10:00.632772 IP 192.168.1.162.5353 > 224.0.0.251.5353: 0*- [0q] 6/0/0[|domain]
3816:10:01.294593 IP 192.168.1.162.5353 > 224.0.0.251.5353: 0*- [0q] 7/0/0[|domain]
3916:10:01.831783 IP 192.168.1.162 > 224.0.0.22: igmp v3 report, 1 group record(s)
4016:10:03.438026 ARP, Request who-has 192.168.1.162 tell 192.168.1.1, length 28
4116:10:03.438040 ARP, Reply 192.168.1.162 is-at 00:26:5e:1b:05:77, length 28
42