[wlanfhain] Der Esel ist los...

Sven-Ola T�cke mail2news
Mo Aug 30 11:15:24 CEST 2004


Hi,

eine Frage in die Runde: Wie haltet Ihr es mit P2P? Sollte man das Blocken?
Hintergrund: Bei mir kommte eine ganze Menge Eselzeugs an - Wobei das
offenbar nur "Streustrahlung" ist, weil ich nicht direkt im Wege sitze. Das
führt mich zu dieser Frage...

Als Ref anbei ein Dump des Verkehrs (wrt, wap, tel = meine Devices,
hdl = 172.16.1.24, rest ist besagte "Streustrahlung").

Gruß, Sven-Ola

>>> DUMP folgt <<<
root at wrt:~# tcpdump -i eth1 not port 22 and not port 698 and not port 53
tcpdump: listening on eth1
00:47:22.616807 41.1.223.82.arsystel.com.8888 > 172.16.1.49.3724: F 
1114597563:1114597563(0) ack 2360017756 win 64079 (DF)
00:47:22.779336 wap > wrt: icmp: redirect ns7.dns-net.de to host hdl [tos 
0xc0]
00:47:22.874787 wap > wrt: icmp: redirect ns7.dns-net.de to host hdl [tos 
0xc0]
00:47:24.621378 sipgate.de.5060 > tel.5060: udp 4 (DF) [tos 0x10]
00:47:24.622132 sipgate.de.5060 > tel.5060: udp 4 (DF) [tos 0x10]
00:47:24.622512 sipgate.de.5060 > tel.5060: udp 4 (DF) [tos 0x10]
00:47:24.626351 wap > wrt: icmp: redirect ns7.dns-net.de to host hdl [tos 
0xc0]
00:47:33.738709 CZ1-RAS-3-u-0054.du.onolab.com.4662 > 172.16.1.49.3726: F 
438033208:438033208(0) ack 2360127400 win 33580 (DF)
00:47:33.744773 wap > wrt: icmp: redirect ns7.dns-net.de to host hdl [tos 
0xc0]
00:47:38.728481 arp who-has 172.16.1.49 tell hdl
00:47:38.740102 arp who-has wap tell wrt
00:47:38.741792 arp reply wap is-at 0:6:25:4b:f:84
00:47:39.541947 sipgate.de.5060 > tel.5060: udp 4 (DF) [tos 0x10]
00:47:39.542736 sipgate.de.5060 > tel.5060: udp 4 (DF) [tos 0x10]
00:47:39.543031 sipgate.de.5060 > tel.5060: udp 4 (DF) [tos 0x10]
00:47:41.018709 69.50.187.210.4661 > 172.16.1.49.3560: P 
3487368222:3487368236(14) ack 2262402851 win 10560 (DF)
00:47:41.023403 wap > wrt: icmp: redirect ns7.dns-net.de to host hdl [tos 
0xc0]
00:47:42.359271 48.Red-81-32-60.pooles.rima-tde.net.2000 > 172.16.1.49.3733: 
FP 2851881818:2851881929(111) ack 2368056029 win 64139 (DF)
00:47:42.362592 wap > wrt: icmp: redirect ns7.dns-net.de to host hdl [tos 
0xc0]
00:47:44.536174 arp who-has wrt tell wap
00:47:44.536396 arp reply wrt is-at 0:f:66:5b:5f:f6
00:47:44.540104 arp who-has tel tell wrt
00:47:44.552068 arp reply tel is-at 0:a0:c5:b7:43:cb
00:47:46.663593 pD9FF76C8.dip.t-dialin.net.4662 > 172.16.1.49.3759: F 
1314899222:1314899222(0) ack 2373088518 win 33844 (DF)
00:47:46.668100 wap > wrt: icmp: redirect ns7.dns-net.de to host hdl [tos 
0xc0]
00:47:50.379286 ACD36912.ipt.aol.com.4662 > 172.16.1.49.3734: F 
2692581834:2692581834(0) ack 2368119862 win 17519 (DF)
00:47:52.969437 210.213.138.51.pldt.net.4662 > 172.16.1.49.3763: FP 
324524748:324524859(111) ack 2373348834 win 65434 (DF)
00:47:52.975483 wap > wrt: icmp: redirect ns7.dns-net.de to host hdl [tos 
0xc0]
00:47:53.643337 p50831CD3.dip.t-dialin.net.4661 > 172.16.1.49.3727: F 
613911776:613911776(0) ack 2364019267 win 32600 (DF)
00:47:54.445315 sipgate.de.5060 > tel.5060: udp 4 (DF) [tos 0x10]
00:47:54.445691 sipgate.de.5060 > tel.5060: udp 4 (DF) [tos 0x10]
00:47:55.386269 arp reply hdl is-at 0:2:6f:9:9f:73
00:47:56.352759 p50831CD3.dip.t-dialin.net.4661 > 172.16.1.49.3727: F 0:0(0) 
ack 1 win 32600 (DF)
00:48:00.085931 pD95F0572.dip.t-dialin.net.4662 > 172.16.1.49.3757: FP 
3875725475:3875725541(66) ack 2373001843 win 32655 (DF)
00:48:01.622985 p50831CD3.dip.t-dialin.net.4661 > 172.16.1.49.3727: F 0:0(0) 
ack 1 win 32600 (DF)
00:48:01.630928 p50831CD3.dip.t-dialin.net.4661 > 172.16.1.49.3727: F 0:0(0) 
ack 1 win 32600 (DF)
00:48:05.080084 arp who-has wap tell wrt
00:48:05.081325 arp reply wap is-at 0:6:25:4b:f:84
00:48:05.170601 arp reply wap is-at 0:6:25:4b:f:84
00:48:12.453582 p50831CD3.dip.t-dialin.net.4661 > 172.16.1.49.3727: F 0:0(0) 
ack 1 win 32600 (DF)
00:48:12.847065 80.242.145.10.80 > 172.16.1.49.3674: F 
3334930491:3334930491(0) ack 2321552908 win 5840 (DF)
00:48:15.843017 80.242.145.10.80 > 172.16.1.49.3674: F 0:0(0) ack 1 win 5840 
(DF)
00:48:15.844184 80.242.145.10.80 > 172.16.1.49.3674: F 0:0(0) ack 1 win 5840 
(DF)
00:48:21.839975 80.242.145.10.80 > 172.16.1.49.3674: F 0:0(0) ack 1 win 5840 
(DF)
00:48:33.830209 80.242.145.10.80 > 172.16.1.49.3674: F 0:0(0) ack 1 win 5840 
(DF)
00:48:33.840406 80.242.145.10.80 > 172.16.1.49.3674: F 0:0(0) ack 1 win 5840 
(DF)
00:48:34.106116 p50831CD3.dip.t-dialin.net.4661 > 172.16.1.49.3727: F 0:0(0) 
ack 1 win 32600 (DF)
00:48:34.756778 pD9FF76C8.dip.t-dialin.net.4662 > 172.16.1.49.3759: F 0:0(0) 
ack 1 win 33844 (DF)
00:48:34.757968 pD9FF76C8.dip.t-dialin.net.4662 > 172.16.1.49.3759: F 0:0(0) 
ack 1 win 33844 (DF)
00:48:36.577146 69.50.187.210.4661 > 172.16.1.49.3560: P 0:14(14) ack 1 win 
10560 (DF)
00:48:36.579613 69.50.187.210.4661 > 172.16.1.49.3560: P 0:14(14) ack 1 win 
10560 (DF)
00:48:38.811430 sipgate.de.5060 > tel.5060: udp 4 (DF) [tos 0x10]
00:48:38.812226 sipgate.de.5060 > tel.5060: udp 4 (DF) [tos 0x10]
00:48:38.812615 sipgate.de.5060 > tel.5060: udp 4 (DF) [tos 0x10]
00:48:38.814606 sipgate.de.5060 > tel.5060: udp 4 (DF) [tos 0x10]
00:48:38.814883 sipgate.de.5060 > tel.5060: udp 4 (DF) [tos 0x10]
00:48:42.765416 c210-49-102-42.frank1.vic.optusnet.com.au.6346 > 
172.16.1.49.3894: S 3500601811:3500601811(0) ack 2415631436 win 64240 <mss 
1460,nop,nop,sackOK> (DF)
00:48:42.768904 wap > wrt: icmp: redirect ns7.dns-net.de to host hdl [tos 
0xc0]
00:48:43.024276 217.216.72.193.4662 > 172.16.1.49.3786: R 
3146618139:3146618139(0) win 0
00:48:43.071627 81.185.95.108.4662 > 172.16.1.49.3749: R 
3491111388:3491111388(0) win 0
00:48:43.144796 wap > wrt: icmp: redirect ns7.dns-net.de to host hdl [tos 
0xc0]
00:48:43.351114 wap > wrt: icmp: redirect ns7.dns-net.de to host hdl [tos 
0xc0]
00:48:43.421389 wrt > ns7.dns-net.de: icmp: wrt udp port 2052 unreachable 
[tos 0xc0]
00:48:43.422950 wrt > ns7.dns-net.de: icmp: wrt udp port 2052 unreachable 
[tos 0xc0]
00:48:43.806156 arp who-has wrt tell wap
00:48:43.806385 arp reply wrt is-at 0:f:66:5b:5f:f6
00:48:43.810103 arp who-has tel tell wrt
00:48:43.828575 arp reply tel is-at 0:a0:c5:b7:43:cb
00:48:44.076964 218-170-122-193.dynamic.hinet.net.4662 > 172.16.1.49.3895: R 
0:0(0) ack 2415693122 win 0
00:48:44.081844 wap > wrt: icmp: redirect ns7.dns-net.de to host hdl [tos 
0xc0]
00:48:44.401866 c210-49-102-42.frank1.vic.optusnet.com.au.6346 > 
172.16.1.49.3894: P 1:61(60) ack 102 win 64139 (DF)
00:48:44.597047 adsl-ull-105-234.42-151.net24.it.4662 > 172.16.1.49.3897: S 
1217296502:1217296502(0) ack 2416271620 win 31944 <mss 1460,nop,nop,sackOK> 
(DF)
00:48:44.781414 c210-49-102-42.frank1.vic.optusnet.com.au.6346 > 
172.16.1.49.3894: P 61:134(73) ack 170 win 64071 (DF)
00:48:44.979466 adsl-ull-105-234.42-151.net24.it.4662 > 172.16.1.49.3897: P 
91:102(11) ack 141 win 31804 (DF)
00:48:45.059231 adsl-ull-105-234.42-151.net24.it.4672 > 172.16.1.49.4662: 
udp 503
00:48:45.298431 adsl-ull-105-234.42-151.net24.it.4662 > 172.16.1.49.3897: P 
102:1411(1309) ack 196 win 31749 (DF)
00:48:45.327092 210.Red-217-127-227.pooles.rima-tde.net.4662 > 
172.16.1.49.3840: R 3752801482:3752801482(0) win 0
00:48:45.515480 p5092935D.dip0.t-ipconnect.de.4661 > 172.16.1.49.3893: S 
3427709518:3427709518(0) ack 2415570012 win 5808 <mss 1452,nop,nop,sackOK> 
(DF)
00:48:46.623290 wap > wrt: icmp: redirect ns7.dns-net.de to host hdl [tos 
0xc0]
00:48:46.909996 220-141-162-108.dynamic.hinet.net.4662 > 172.16.1.49.3904: R 
0:0(0) ack 2416832836 win 0
00:48:46.944435 81.185.85.85.4662 > 172.16.1.49.3907: R 0:0(0) ack 
2416986306 win 0
00:48:47.021073 bcnjfppp.jazztel.es.4662 > 172.16.1.49.3912: R 0:0(0) ack 
2417207706 win 0
00:48:47.178715 d213-103-204-157.cust.tele2.fr.4662 > 172.16.1.49.3910: P 
4259473178:4259473216(38) ack 2417132189 win 16772 (DF)
00:48:47.383739 arp reply hdl is-at 0:2:6f:9:9f:73
00:48:47.400242 d213-103-204-157.cust.tele2.fr.4662 > 172.16.1.49.3910: P 
38:60(22) ack 102 win 16671 (DF)
00:48:48.520177 wap > wrt: icmp: redirect ns7.dns-net.de to host hdl [tos 
0xc0]
00:48:48.870248 d213-103-204-157.cust.tele2.fr.4662 > 172.16.1.49.3910: . 
ack 676 win 16097 <nop,nop,sack sack 2 {7620:8448}[|tcp]> (DF)
00:48:49.070085 arp who-has wap tell wrt
00:48:49.071293 arp reply wap is-at 0:6:25:4b:f:84
00:48:49.080940 81.185.85.85.4662 > 172.16.1.49.3907: S 
583295608:583295608(0) ack 2416986306 win 65535 <mss 1440,nop,nop,sackOK> 
(DF)
00:48:49.128332 d213-103-204-157.cust.tele2.fr.4662 > 172.16.1.49.3910: . 
ack 676 win 16097 <nop,nop,sack sack 2 {7620:9026}[|tcp]> (DF)
00:48:49.407539 d213-103-204-157.cust.tele2.fr.4662 > 172.16.1.49.3910: . 
ack 832 win 15941 <nop,nop,sack sack 3 {1868:2178}[|tcp]> (DF)
00:48:49.412363 d213-103-204-157.cust.tele2.fr.4662 > 172.16.1.49.3910: . 
ack 832 win 15941 <nop,nop,sack sack 3 {3388:3660}[|tcp]> (DF)
00:48:49.418329 d213-103-204-157.cust.tele2.fr.4662 > 172.16.1.49.3910: . 
ack 832 win 15941 <nop,nop,sack sack 2 {4883:6516}[|tcp]> (DF)
00:48:50.034253 211.209.46.87.4662 > 172.16.1.49.3901: R 0:0(0) ack 
2416715620 win 0
00:48:51.223893 p508D96A9.dip.t-dialin.net.4662 > 172.16.1.49.3896: R 0:0(0) 
ack 2415902083 win 0
00:48:51.227050 wap > wrt: icmp: redirect ns7.dns-net.de to host hdl [tos 
0xc0]
00:48:51.348721 CPE-139-168-67-35.nsw.bigpond.net.au.4662 > 
172.16.1.49.3899: R 0:0(0) ack 2416615118 win 0
00:48:51.538491 ACCEAC3A.ipt.aol.com.4662 > 172.16.1.49.3905: R 0:0(0) ack 
2416868707 win 0
00:48:51.605263 82.142.5.243.4662 > 172.16.1.49.3900: R 0:0(0) ack 
2416664694 win 0
00:48:51.956304 220-141-162-108.dynamic.hinet.net.4662 > 172.16.1.49.3904: S 
3283630536:3283630536(0) ack 2416832836 win 64800 <mss 1440,nop,nop,sackOK> 
(DF)
00:48:53.510260 arp who-has hdl tell wap
00:48:53.511432 arp reply hdl is-at 0:2:6f:9:9f:73
00:48:54.561319 82.166.247.71.5662 > 172.16.1.49.3920: S 
1436661177:1436661177(0) ack 2419813591 win 64240 <mss 1444,nop,nop,sackOK> 
(DF)
00:48:54.746740 82.166.247.71.5662 > 172.16.1.49.3920: P 1:145(144) ack 102 
win 64139 (DF)
00:48:56.527555 port-212-202-201-125.dynamic.qsc.de.4672 > 172.16.1.49.4662: 
udp 27
00:48:56.533875 wap > wrt: icmp: redirect ns7.dns-net.de to host hdl [tos 
0xc0]
00:48:56.620451 82.166.247.71.5662 > 172.16.1.49.3920: P 145:156(11) ack 140 
win 64101 (DF)
00:48:56.670959 port-212-202-10-148.dynamic.qsc.de.4672 > 172.16.1.49.4662: 
udp 27
00:48:57.551022 dsl-082-083-147-047.arcor-ip.net.4662 > 172.16.1.49.3921: S 
1092540391:1092540391(0) ack 2420598684 win 33120 <mss 1440,nop,nop,sackOK> 
(DF)
00:48:57.809845 80.242.145.10.80 > 172.16.1.49.3674: F 0:0(0) ack 1 win 5840 
(DF)
00:48:57.935140 dsl-082-083-147-047.arcor-ip.net.4662 > 172.16.1.49.3921: P 
101:112(11) ack 140 win 32981 (DF)
00:48:57.951156 82.166.247.71.5662 > 172.16.1.49.3920: P 156:257(101) ack 
195 win 64046 (DF)
00:48:58.042021 dsl-082-083-147-047.arcor-ip.net.4662 > 172.16.1.49.3921: P 
112:213(101) ack 195 win 32926 (DF)
00:48:58.379305 dsl-082-083-147-047.arcor-ip.net.4662 > 172.16.1.49.3921: P 
213:251(38) ack 195 win 32926 (DF)
00:48:58.817146 dsl-082-083-147-047.arcor-ip.net.4662 > 172.16.1.49.3921: . 
ack 290 win 32831 (DF)
00:48:59.266165 220-141-162-108.dynamic.hinet.net.4662 > 172.16.1.49.3904: P 
1:83(82) ack 102 win 64699 (DF)
00:48:59.757478 81.185.85.85.4662 > 172.16.1.49.3907: P 1:95(94) ack 102 win 
65434 (DF)
00:48:59.942110 82.166.247.71.5662 > 172.16.1.49.3920: P 156:295(139) ack 
195 win 64046 (DF)
00:49:00.756636 arp who-has wap tell hdl
00:49:00.757282 arp reply wap is-at 0:6:25:4b:f:84
00:49:02.336076 82.166.247.71.5662 > 172.16.1.49.3920: . ack 290 win 63951 
(DF)
00:49:02.586543 172.16.100.224.52217 > 255.255.255.255.2222: udp 94
00:49:04.297625 220-141-162-108.dynamic.hinet.net.4662 > 172.16.1.49.3904: P 
83:187(104) ack 113 win 64688 (DF)
00:49:05.334829 81.185.85.85.4662 > 172.16.1.49.3907: P 95:150(55) ack 206 
win 65330 (DF)
00:49:06.543050 80.102.174.66.4672 > 172.16.1.49.4662: udp 27
00:49:06.567909 126-12-37-213.libre.auna.net.4672 > 172.16.1.49.4662: udp 27
00:49:06.636477 dsl-213-023-057-200.arcor-ip.net.4672 > 172.16.1.49.4662: 
udp 294
00:49:06.669285 69-164-173-24.pittpa.adelphia.net.4672 > 172.16.1.49.4662: 
udp 27
00:49:06.689267 m236.net81-64-154.noos.fr.4678 > 172.16.1.49.4662: udp 27
00:49:06.759858 220-141-162-108.dynamic.hinet.net.4662 > 172.16.1.49.3904: P 
264:286(22) ack 307 win 64494 (DF)
00:49:06.767061 botelho-fr.com.4672 > 172.16.1.49.4662: udp 27
00:49:07.393124 lns-vlq-26-82-254-157-118.adsl.proxad.net.4662 > 
172.16.1.49.3898: P 987381660:987381671(11) ack 2416556170 win 16832 (DF)
00:49:07.553498 p5092935D.dip0.t-ipconnect.de.4661 > 172.16.1.49.3893: . ack 
170 win 5808 (DF)
00:49:07.735212 p5092935D.dip0.t-ipconnect.de.4661 > 172.16.1.49.3893: . ack 
309 win 5808 (DF)
00:49:07.862181 lns-vlq-26-82-254-157-118.adsl.proxad.net.4662 > 
172.16.1.49.3898: P 11:66(55) ack 39 win 16794 (DF)
00:49:08.133533 p5092935D.dip0.t-ipconnect.de.4661 > 172.16.1.49.3893: P 
842:985(143) ack 309 win 5808 (DF)
00:49:08.318857 220-141-162-108.dynamic.hinet.net.4662 > 172.16.1.49.3904: . 
ack 329 win 64472 (DF)
00:49:08.467796 lns-vlq-26-82-254-157-118.adsl.proxad.net.4662 > 
172.16.1.49.3898: P 66:167(101) ack 94 win 16739 (DF)
00:49:08.488311 p5092935D.dip0.t-ipconnect.de.4661 > 172.16.1.49.3893: . ack 
343 win 5808 (DF)
00:49:08.553523 220-141-162-108.dynamic.hinet.net.4662 > 172.16.1.49.3904: P 
286:304(18) ack 329 win 64472 (DF)
00:49:08.772857 81.185.85.85.4662 > 172.16.1.49.3907: P 289:307(18) ack 228 
win 65308 (DF)
00:49:09.112095 p5092935D.dip0.t-ipconnect.de.4661 > 172.16.1.49.3893: P 
985:1029(44) ack 343 win 5808 (DF)
00:49:09.484523 p5092935D.dip0.t-ipconnect.de.4661 > 172.16.1.49.3893: . ack 
361 win 5808 (DF)
00:49:10.895169 lns-vlq-26-82-254-157-118.adsl.proxad.net.4662 > 
172.16.1.49.3898: P 66:205(139) ack 94 win 16739 (DF)
00:49:11.158854 218.82.12.102.4662 > 172.16.1.49.3924: R 
1582826492:1582826492(0) win 0
00:49:11.898186 wrt > ns7.dns-net.de: icmp: wrt udp port 2052 unreachable 
[tos 0xc0]
00:49:11.899708 wrt > ns7.dns-net.de: icmp: wrt udp port 2052 unreachable 
[tos 0xc0]
00:49:12.295215 OL91-173.fibertel.com.ar.4662 > 172.16.1.49.3926: R 
3605549916:3605549916(0) win 0
00:49:12.577142 APuteaux-151-1-48-3.w82-124.abo.wanadoo.fr.4662 > 
172.16.1.49.3932: S 97049919:97049919(0) ack 2424905757 win 17520 <mss 
1460,nop,nop,sackOK> (DF)
00:49:12.582929 653465hfc252.tampabay.rr.com.4662 > 172.16.1.49.3930: S 
119688001:119688001(0) ack 2424808515 win 65535 <mss 1460,nop,nop,sackOK> 
(DF)
00:49:12.599385 d51A44CA9.kabel.telenet.be.5129 > 172.16.1.49.3935: S 
2136841415:2136841415(0) ack 2425057506 win 64240 <mss 1460,nop,nop,sackOK> 
(DF)
00:49:12.649959 VDSL-130-13-181-168.PHNX.QWEST.NET.4662 > 172.16.1.49.3931: 
S 4151771493:4151771493(0) ack 2424852349 win 17520 <mss 
1460,nop,nop,sackOK> (DF)
00:49:12.693851 d51A44CA9.kabel.telenet.be.5129 > 172.16.1.49.3935: P 
1:69(68) ack 102 win 64139 (DF)
00:49:12.722209 APuteaux-151-1-48-3.w82-124.abo.wanadoo.fr.4662 > 
172.16.1.49.3932: P 1:101(100) ack 102 win 17419 (DF)
00:49:12.766410 d51A44CA9.kabel.telenet.be.5129 > 172.16.1.49.3935: P 
69:130(61) ack 170 win 64071 (DF)
00:49:13.155309 VDSL-130-13-181-168.PHNX.QWEST.NET.4662 > 172.16.1.49.3931: 
P 71:162(91) ack 124 win 17397 (DF)
00:49:13.199590 APuteaux-151-1-48-3.w82-124.abo.wanadoo.fr.4662 > 
172.16.1.49.3932: P 112:213(101) ack 195 win 17326 (DF)
00:49:13.364633 VDSL-130-13-181-168.PHNX.QWEST.NET.4662 > 172.16.1.49.3931: 
P 162:196(34) ack 146 win 17375 (DF)
00:49:13.451930 653465hfc252.tampabay.rr.com.4662 > 172.16.1.49.3930: P 
1:71(70) ack 102 win 65434 (DF)
00:49:13.624832 222.56.17.91.4662 > 172.16.1.49.3933: S 
1919265464:1919265464(0) ack 2424964696 win 64800 <mss 1440,nop,nop,sackOK> 
(DF)
00:49:13.728546 d51A44CA9.kabel.telenet.be.5129 > 172.16.1.49.3935: P 
262:298(36) ack 283 win 63958 (DF)
00:49:13.805208 653465hfc252.tampabay.rr.com.4662 > 172.16.1.49.3930: . ack 
124 win 65412 (DF)
00:49:14.109803 653465hfc252.tampabay.rr.com.4662 > 172.16.1.49.3930: . ack 
146 win 65390 (DF)
00:49:14.256986 653465hfc252.tampabay.rr.com.4662 > 172.16.1.49.3930: P 
71:139(68) ack 146 win 65390 (DF)
00:49:14.270183 APuteaux-151-1-48-3.w82-124.abo.wanadoo.fr.4662 > 
172.16.1.49.3932: P 213:251(38) ack 195 win 17326 (DF)
00:49:14.429720 80.242.145.10.80 > 172.16.1.49.3929: S 
3705487398:3705487398(0) ack 2424518790 win 5840 <mss 1460,nop,nop,sackOK> 
(DF)
00:49:14.474053 cpc1-pmth3-5-0-cust2.cos2.cable.ntl.com.4662 > 
172.16.1.49.3936: S 3689235688:3689235688(0) ack 2425598143 win 65340 <mss 
1402,nop,nop,sackOK> (DF)
00:49:14.682432 cpc1-pmth3-5-0-cust2.cos2.cable.ntl.com.4662 > 
172.16.1.49.3936: . ack 102 win 65239 (DF)
00:49:14.706039 cpc1-pmth3-5-0-cust2.cos2.cable.ntl.com.4662 > 
172.16.1.49.3936: P 1:82(81) ack 102 win 65239 (DF)
00:49:14.820619 222.56.17.91.4662 > 172.16.1.49.3933: P 1:98(97) ack 102 win 
64699 (DF)
00:49:14.876812 d51A44CA9.kabel.telenet.be.5129 > 172.16.1.49.3935: P 
298:320(22) ack 364 win 63877 (DF)
00:49:14.896903 cpc1-pmth3-5-0-cust2.cos2.cable.ntl.com.4662 > 
172.16.1.49.3936: . ack 140 win 65201 (DF)
00:49:14.955378 cpc1-pmth3-5-0-cust2.cos2.cable.ntl.com.4662 > 
172.16.1.49.3936: P 82:143(61) ack 140 win 65201 (DF)
00:49:15.069000 d51A44CA9.kabel.telenet.be.5129 > 172.16.1.49.3935: . ack 
398 win 63843 (DF)
00:49:15.186560 cpc1-pmth3-5-0-cust2.cos2.cable.ntl.com.4662 > 
172.16.1.49.3936: . ack 162 win 65179 (DF)
00:49:15.194868 81.185.85.85.4662 > 172.16.1.49.3907: P 307:329(22) ack 329 
win 65207 (DF)
00:49:15.231409 cpc1-pmth3-5-0-cust2.cos2.cable.ntl.com.4662 > 
172.16.1.49.3936: P 143:161(18) ack 162 win 65179 (DF)
00:49:15.482466 AToulouse-152-1-52-28.w82-125.abo.wanadoo.fr.4662 > 
172.16.1.49.3934: S 662045585:662045585(0) ack 2425009028 win 65535 <mss 
1420,nop,nop,sackOK> (DF)
00:49:15.816422 AToulouse-152-1-52-28.w82-125.abo.wanadoo.fr.4662 > 
172.16.1.49.3934: . ack 102 win 65434 (DF)
00:49:15.870060 AToulouse-152-1-52-28.w82-125.abo.wanadoo.fr.4662 > 
172.16.1.49.3934: P 1:101(100) ack 102 win 65434 (DF)
00:49:15.925828 lns-vlq-26-82-254-157-118.adsl.proxad.net.4662 > 
172.16.1.49.3898: P 66:205(139) ack 94 win 16739 (DF)
00:49:16.018554 222.56.17.91.4662 > 172.16.1.49.3933: P 98:193(95) ack 140 
win 64661 (DF)
00:49:16.049815 lns-vlq-26-82-254-157-118.adsl.proxad.net.4662 > 
172.16.1.49.3898: P 205:223(18) ack 217 win 16616 (DF)
00:49:16.121586 48.Red-81-32-60.pooles.rima-tde.net.2000 > 172.16.1.49.3733: 
R 2851881930:2851881930(0) win 0 (DF)
00:49:16.168410 AToulouse-152-1-52-28.w82-125.abo.wanadoo.fr.4672 > 
172.16.1.49.4662: udp 512
00:49:16.346360 AToulouse-152-1-52-28.w82-125.abo.wanadoo.fr.4662 > 
172.16.1.49.3934: P 112:178(66) ack 195 win 65341 (DF)
00:49:16.540716 APuteaux-151-1-48-3.w82-124.abo.wanadoo.fr.4662 > 
172.16.1.49.3932: P 213:251(38) ack 195 win 17326 (DF)
00:49:16.852584 APuteaux-151-1-48-3.w82-124.abo.wanadoo.fr.4662 > 
172.16.1.49.3932: . ack 290 win 17231 (DF)
00:49:16.990662 81.185.85.85.4662 > 172.16.1.49.3907: . ack 347 win 65189 
(DF)
00:49:17.093749 lns-vlq-26-82-254-157-118.adsl.proxad.net.4662 > 
172.16.1.49.3898: . ack 235 win 16598 (DF)
00:49:17.308426 p50831CD3.dip.t-dialin.net.4661 > 172.16.1.49.3727: F 0:0(0) 
ack 1 win 32600 (DF)
00:49:17.492310 ip503cfe9f.speed.planet.nl.4662 > 172.16.1.49.3941: S 
39714559:39714559(0) ack 2426556602 win 17640 <mss 1260,nop,nop,sackOK> (DF)
00:49:17.520928 82-70-47-190.dsl.in-addr.zen.co.uk.9090 > 172.16.1.49.3942: 
S 55426903:55426903(0) ack 2426618800 win 65535 <mss 1402,nop,nop,sackOK> 
(DF)
00:49:17.545073 ATuileries-152-1-40-40.w82-123.abo.wanadoo.fr.4662 > 
172.16.1.49.3938: S 2453999521:2453999521(0) ack 2426449794 win 65535 <mss 
1420,nop,nop,sackOK> (DF)
00:49:17.586706 ip503cfe9f.speed.planet.nl.4662 > 172.16.1.49.3941: P 
1:83(82) ack 102 win 17539 (DF)
00:49:17.657450 ip503cfe9f.speed.planet.nl.4662 > 172.16.1.49.3941: P 
83:94(11) ack 140 win 17501 (DF)
00:49:17.674842 82-70-47-190.dsl.in-addr.zen.co.uk.9090 > 172.16.1.49.3942: 
P 1:64(63) ack 102 win 65434 (DF)
00:49:17.685510 AStrasbourg-207-1-9-167.w81-249.abo.wanadoo.fr.4662 > 
172.16.1.49.3937: S 3056631400:3056631400(0) ack 2426404249 win 65535 <mss 
1460,nop,nop,sackOK> (DF)
00:49:17.761065 82-70-47-190.dsl.in-addr.zen.co.uk.9090 > 172.16.1.49.3942: 
P 64:151(87) ack 124 win 65412 (DF)
00:49:17.795714 ip503cfe9f.speed.planet.nl.4662 > 172.16.1.49.3941: P 
94:195(101) ack 195 win 17446 (DF)
00:49:17.877451 AStrasbourg-207-1-9-167.w81-249.abo.wanadoo.fr.4662 > 
172.16.1.49.3937: P 1:155(154) ack 102 win 65434 (DF)
00:49:18.014938 ATuileries-152-1-40-40.w82-123.abo.wanadoo.fr.4662 > 
172.16.1.49.3938: . ack 102 win 65434 (DF)
00:49:18.050280 82-70-47-190.dsl.in-addr.zen.co.uk.9090 > 172.16.1.49.3942: 
P 151:185(34) ack 146 win 65390 (DF)
00:49:18.078351 ATuileries-152-1-40-40.w82-123.abo.wanadoo.fr.4662 > 
172.16.1.49.3938: P 1:83(82) ack 102 win 65434 (DF)
00:49:18.086757 AStrasbourg-207-1-9-167.w81-249.abo.wanadoo.fr.4662 > 
172.16.1.49.3937: P 155:250(95) ack 140 win 65396 (DF)
00:49:18.102098 80-28-149-15.adsl.nuria.telefonica-data.net > 172.16.1.49: 
icmp: 80-28-149-15.adsl.nuria.telefonica-data.net udp port 1090 unreachable
00:49:18.235216 tel.5060 > sipgate.de.5060: udp 417
00:49:18.235787 wrt > tel: icmp: redirect sipgate.de to host wap [tos 0xc0]
00:49:18.236153 tel.5060 > sipgate.de.5060: udp 417
00:49:18.238887 tel.5060 > sipgate.de.5060: udp 417
00:49:18.279305 sipgate.de.5060 > tel.5060: udp 701 (DF) [tos 0x10]
00:49:18.281844 sipgate.de.5060 > tel.5060: udp 701 (DF) [tos 0x10]
00:49:18.282203 sipgate.de.5060 > tel.5060: udp 701 (DF) [tos 0x10]
00:49:18.367967 ATuileries-152-1-40-40.w82-123.abo.wanadoo.fr.4662 > 
172.16.1.49.3938: P 83:94(11) ack 140 win 65396 (DF)
00:49:18.503452 ATuileries-152-1-40-40.w82-123.abo.wanadoo.fr.4662 > 
172.16.1.49.3938: P 94:165(71) ack 195 win 65341 (DF)
00:49:18.599656 tel.5060 > sipgate.de.5060: udp 606
00:49:18.600158 wrt > tel: icmp: redirect sipgate.de to host wap [tos 0xc0]
00:49:18.600515 tel.5060 > sipgate.de.5060: udp 606
00:49:18.605470 tel.5060 > sipgate.de.5060: udp 606
00:49:18.651375 sipgate.de.5060 > tel.5060: udp 674 (DF) [tos 0x10]
00:49:18.651695 sipgate.de.5060 > tel.5060: udp 674 (DF) [tos 0x10]
00:49:18.691712 AToulouse-152-1-52-28.w82-125.abo.wanadoo.fr.4662 > 
172.16.1.49.3934: P 112:216(104) ack 195 win 65341 (DF)
00:49:18.840941 80.242.145.10.80 > 172.16.1.49.3929: S 
3705487398:3705487398(0) ack 2424518790 win 5840 <mss 1460,nop,nop,sackOK> 
(DF)
00:49:19.323919 AToulouse-152-1-52-28.w82-125.abo.wanadoo.fr.4662 > 
172.16.1.49.3934: . ack 290 win 65246 (DF)
00:49:20.499942 dsl-80-46-140-130.access.uk.tiscali.com.4662 > 
172.16.1.49.3943: S 185536204:185536204(0) ack 2427413859 win 17520 <mss 
1460,nop,nop,sackOK> (DF)
00:49:20.628039 dsl-80-46-140-130.access.uk.tiscali.com.4662 > 
172.16.1.49.3943: P 1:84(83) ack 102 win 17419 (DF)
00:49:20.864261 dsl-80-46-140-130.access.uk.tiscali.com.4672 > 
172.16.1.49.4662: udp 524
00:49:21.285286 80-28-149-15.adsl.nuria.telefonica-data.net.1080 > 
172.16.1.49.3940: P 2332971327:2332971338(11) ack 2426522599 win 64101 (DF)
00:49:22.173856 80-28-149-15.adsl.nuria.telefonica-data.net.1080 > 
172.16.1.49.3940: P 11:112(101) ack 84 win 64018 (DF)
00:49:22.578100 pcp490341pcs.nash01.tn.comcast.net.4662 > 172.16.1.49.3946: 
R 0:0(0) ack 2428060074 win 0
00:49:22.579452 d146-2-55.home1.cgocable.net.4662 > 172.16.1.49.3948: S 
3770513835:3770513835(0) ack 2428137194 win 64240 <mss 1460,nop,nop,sackOK> 
(DF)
00:49:22.731727 sipgate.de.5060 > tel.5060: udp 4 (DF) [tos 0x10]
00:49:22.732016 sipgate.de.5060 > tel.5060: udp 4 (DF) [tos 0x10]
00:49:22.753916 d146-2-55.home1.cgocable.net.4662 > 172.16.1.49.3948: P 
1:80(79) ack 102 win 64139 (DF)
00:49:22.864511 arp who-has wrt tell wap
00:49:22.864662 arp reply wrt is-at 0:f:66:5b:5f:f6
00:49:23.168606 pcp490341pcs.nash01.tn.comcast.net.4662 > 172.16.1.49.3946: 
R 0:0(0) ack 1 win 0
00:49:23.230068 arp who-has tel tell wrt
00:49:23.253495 arp reply tel is-at 0:a0:c5:b7:43:cb
00:49:23.264020 d146-2-55.home1.cgocable.net.4662 > 172.16.1.49.3948: P 
80:102(22) ack 146 win 64095 (DF)
00:49:23.572117 dsl-80-46-140-130.access.uk.tiscali.com.4662 > 
172.16.1.49.3943: . ack 162 win 17359 (DF)
00:49:23.634368 dsl-80-46-140-130.access.uk.tiscali.com.4662 > 
172.16.1.49.3943: P 153:171(18) ack 162 win 17359 (DF)
00:49:23.782986 pcp490341pcs.nash01.tn.comcast.net.4662 > 172.16.1.49.3946: 
R 0:0(0) ack 1 win 0
00:49:24.073006 220-141-162-108.dynamic.hinet.net.4662 > 172.16.1.49.3904: P 
304:350(46) ack 335 win 64466 (DF)
00:49:24.114534 lns-th2-1-82-64-3-89.adsl.proxad.net.4662 > 
172.16.1.49.3944: S 1345644:1345644(0) ack 2427974481 win 65535 <mss 
1420,nop,nop,sackOK> (DF)
00:49:24.196631 25.Red-217-125-232.pooles.rima-tde.net.4662 > 
172.16.1.49.3939: S 3312722757:3312722757(0) ack 2426486325 win 17328 <mss 
1444,nop,nop,sackOK> (DF)
00:49:24.870106 80.242.145.10.80 > 172.16.1.49.3929: . ack 323 win 6432 (DF)
00:49:24.882150 80.242.145.10.80 > 172.16.1.49.3929: F 712:712(0) ack 323 
win 6432 (DF)
00:49:24.922361 80.242.145.10.80 > 172.16.1.49.3929: . ack 324 win 6432 (DF)
00:49:24.930385 80.242.145.10.80 > 172.16.1.49.3949: S 
3722510537:3722510537(0) ack 2428773641 win 5840 <mss 1460,nop,nop,sackOK> 
(DF)
00:49:24.940640 80.242.145.10.80 > 172.16.1.49.3950: S 
3716997423:3716997423(0) ack 2428834559 win 5840 <mss 1460,nop,nop,sackOK> 
(DF)
00:49:24.970788 p5092935D.dip0.t-ipconnect.de.4661 > 172.16.1.49.3893: . ack 
367 win 5808 (DF)
00:49:24.973945 p5092935D.dip0.t-ipconnect.de.4661 > 172.16.1.49.3893: F 
1029:1029(0) ack 367 win 5808 (DF)
00:49:24.993537 80.242.145.10.80 > 172.16.1.49.3949: . ack 601 win 6600 (DF)
00:49:25.027205 80.242.145.10.80 > 172.16.1.49.3949: P 1:1012(1011) ack 601 
win 6600 (DF)
00:49:25.051454 80.242.145.10.80 > 172.16.1.49.3949: F 1012:1012(0) ack 601 
win 6600 (DF)
00:49:25.111008 p5092935D.dip0.t-ipconnect.de.4661 > 172.16.1.49.3893: . ack 
368 win 5808 (DF)
00:49:25.481677 cp477474-b.tilbu1.nb.home.nl.4662 > 172.16.1.49.3952: S 
1183707807:1183707807(0) ack 2429094364 win 64240 <mss 1460,nop,nop,sackOK> 
(DF) [tos 0x20]
00:49:25.538870 AFontenayssB-151-1-13-247.w82-121.abo.wanadoo.fr.4662 > 
172.16.1.49.3953: S 300378138:300378138(0) ack 2429127638 win 65535 <mss 
1440,nop,nop,sackOK> (DF)
00:49:25.629514 220-141-162-108.dynamic.hinet.net.4662 > 172.16.1.49.3904: . 
ack 847 win 63954 (DF)
00:49:25.695951 AFontenayssB-151-1-13-247.w82-121.abo.wanadoo.fr.4662 > 
172.16.1.49.3953: P 1:69(68) ack 102 win 65434 (DF)
00:49:25.710692 220-141-162-108.dynamic.hinet.net.4662 > 172.16.1.49.3904: . 
ack 2319 win 64800 (DF)
00:49:25.951072 AFontenayssB-151-1-13-247.w82-121.abo.wanadoo.fr.4662 > 
172.16.1.49.3953: P 69:145(76) ack 170 win 65366 (DF)
00:49:26.124640 adsl-ull-105-234.42-151.net24.it.4662 > 172.16.1.49.3897: F 
1429:1429(0) ack 218 win 31727 (DF)
00:49:26.203173 AFontenayssB-151-1-13-247.w82-121.abo.wanadoo.fr.4662 > 
172.16.1.49.3953: P 145:227(82) ack 206 win 65330 (DF)
00:49:26.301598 adsl-ull-105-234.42-151.net24.it.4662 > 172.16.1.49.3897: . 
ack 219 win 31727 (DF)
00:49:26.578540 80-28-149-15.adsl.nuria.telefonica-data.net.1080 > 
172.16.1.49.3940: P 11:112(101) ack 139 win 63963 (DF)
00:49:26.687275 25.Red-217-125-232.pooles.rima-tde.net.4662 > 
172.16.1.49.3939: S 3312722757:3312722757(0) ack 2426486325 win 17328 <mss 
1444,nop,nop,sackOK> (DF)
00:49:26.939072 81.185.85.85.4662 > 172.16.1.49.3907: P 329:330(1) ack 353 
win 65183 (DF)
00:49:27.832073 80.242.145.10.80 > 172.16.1.49.3922: . 
3691843814:3691845274(1460) ack 2420748484 win 6432 (DF)
00:49:27.856359 25.Red-217-125-232.pooles.rima-tde.net.4662 > 
172.16.1.49.3939: . ack 102 win 17227 (DF)
00:49:28.060130 80.242.145.10.80 > 172.16.1.49.3949: . ack 602 win 6600 (DF)
00:49:28.069427 80.242.145.10.80 > 172.16.1.49.3955: S 
3717814866:3717814866(0) ack 2429874852 win 5840 <mss 1460,nop,nop,sackOK> 
(DF)
00:49:28.133120 80.242.145.10.80 > 172.16.1.49.3955: . ack 488 win 6432 (DF)
00:49:28.164375 80.242.145.10.80 > 172.16.1.49.3955: . 1:1461(1460) ack 488 
win 6432 (DF)
00:49:28.194907 80.242.145.10.80 > 172.16.1.49.3955: P 1461:1726(265) ack 
488 win 6432 (DF)
00:49:28.354996 25.Red-217-125-232.pooles.rima-tde.net.4662 > 
172.16.1.49.3939: P 1:101(100) ack 102 win 17227 (DF)
00:49:28.386871 AFontenayssB-151-1-13-247.w82-121.abo.wanadoo.fr.4662 > 
172.16.1.49.3953: P 145:252(107) ack 228 win 65308 (DF)
00:49:28.415846 81.185.85.85.4662 > 172.16.1.49.3907: P 330:375(45) ack 353 
win 65183 (DF)
00:49:28.452192 80.242.145.10.80 > 172.16.1.49.3957: S 
3714095888:3714095888(0) ack 2430065064 win 5840 <mss 1460,nop,nop,sackOK> 
(DF)
00:49:28.504662 cp477474-b.tilbu1.nb.home.nl.4662 > 172.16.1.49.3952: P 
1:85(84) ack 102 win 64139 (DF) [tos 0x20]
00:49:28.511616 OL91-173.fibertel.com.ar.4662 > 172.16.1.49.3956: S 
3612528953:3612528953(0) ack 2429979948 win 64240 <mss 1460,nop,nop,sackOK> 
(DF)
00:49:28.518404 69.50.187.210.4661 > 172.16.1.49.3830: R 
3931385095:3931385095(0) win 0 (DF)
00:49:28.529021 AFontenayssB-151-1-13-247.w82-121.abo.wanadoo.fr.4662 > 
172.16.1.49.3953: P 252:270(18) ack 250 win 65286 (DF)
00:49:28.675836 cp477474-b.tilbu1.nb.home.nl.4662 > 172.16.1.49.3952: . ack 
140 win 64101 (DF) [tos 0x20]
00:49:28.688438 cp477474-b.tilbu1.nb.home.nl.4662 > 172.16.1.49.3952: P 
85:152(67) ack 140 win 64101 (DF) [tos 0x20]
00:49:28.819447 69.50.187.210.4661 > 172.16.1.49.3958: S 
4111425534:4111425534(0) ack 2430164853 win 5840 <mss 1460,nop,nop,sackOK> 
(DF)
00:49:28.989531 c210-49-102-42.frank1.vic.optusnet.com.au.6346 > 
172.16.1.49.3894: . ack 227 win 64015 (DF)
00:49:28.992421 c210-49-102-42.frank1.vic.optusnet.com.au.6346 > 
172.16.1.49.3894: F 255:255(0) ack 227 win 64015 (DF)
00:49:29.068957 69.50.187.210.4661 > 172.16.1.49.3958: . ack 95 win 5840 
(DF)
00:49:29.084604 lns-vlq-26-82-254-157-118.adsl.proxad.net.4662 > 
172.16.1.49.3898: P 245:291(46) ack 241 win 16592 (DF)
00:49:29.110069 arp who-has wap tell wrt
00:49:29.111293 arp reply wap is-at 0:6:25:4b:f:84
00:49:29.583125 24.227.19.193.in-addr.arpa.4661 > 172.16.1.49.3959: S 
4193123660:4193123660(0) ack 2430474546 win 5840 <mss 1460,nop,nop,sackOK> 
(DF)
00:49:29.683157 24.227.19.193.in-addr.arpa.4661 > 172.16.1.49.3959: . ack 95 
win 5746 (DF)
00:49:29.725797 lns-vlq-26-82-254-157-118.adsl.proxad.net.4662 > 
172.16.1.49.3898: . ack 471 win 16362 (DF)
00:49:29.927431 lns-vlq-26-82-254-157-118.adsl.proxad.net.4662 > 
172.16.1.49.3898: . ack 471 win 16362 <nop,nop,sack sack 1 {1883:1918} > 
(DF)
00:49:30.017814 d213-103-204-157.cust.tele2.fr.4662 > 172.16.1.49.3910: . 
ack 2244 win 16944 <nop,nop,sack sack 2 {4883:6516}[|tcp]> (DF)
00:49:30.135874 81.185.85.85.4662 > 172.16.1.49.3907: . ack 865 win 64671 
(DF)
00:49:30.215160 81.185.85.85.4662 > 172.16.1.49.3907: . ack 865 win 64671 
<nop,nop,sack sack 1 {2305:2354} > (DF)
00:49:30.270815 81.185.85.85.4662 > 172.16.1.49.3907: . ack 865 win 64671 
<nop,nop,sack sack 2 {3794:3835}[|tcp]> (DF)
00:49:31.047294 222.56.17.91.4662 > 172.16.1.49.3933: P 193:231(38) ack 140 
win 64661 (DF)
00:49:31.186290 cp477474-b.tilbu1.nb.home.nl.4662 > 172.16.1.49.3952: P 
85:152(67) ack 140 win 64101 (DF) [tos 0x20]
00:49:31.254114 cp477474-b.tilbu1.nb.home.nl.4662 > 172.16.1.49.3952: P 
152:170(18) ack 162 win 64079 (DF) [tos 0x20]
00:49:31.502290 80.242.145.10.80 > 172.16.1.49.3957: . ack 478 win 6432 (DF)
00:49:31.580473 80.242.145.10.80 > 172.16.1.49.3957: . 1461:2921(1460) ack 
478 win 6432 (DF)
00:49:31.722421 arp reply hdl is-at 0:2:6f:9:9f:73
00:49:31.734009 81.185.85.85.4662 > 172.16.1.49.3907: . ack 940 win 64596 
<nop,nop,sack sack 3 {2305:2448}[|tcp]> (DF)
00:49:32.215098 OL91-173.fibertel.com.ar.4662 > 172.16.1.49.3956: . ack 113 
win 64128 (DF)
00:49:32.248136 OL91-173.fibertel.com.ar.4662 > 172.16.1.49.3956: P 
151:206(55) ack 113 win 64128 (DF)
00:49:32.432261 222.56.17.91.4662 > 172.16.1.49.3933: . ack 235 win 64566 
(DF)
00:49:32.460820 25.Red-217-125-232.pooles.rima-tde.net.4662 > 
172.16.1.49.3939: . ack 140 win 17189 (DF)
00:49:33.096473 n219079017135.netvigator.com.4662 > 172.16.1.49.3914: R 
1172709748:1172709748(0) win 0
00:49:34.545389 80.242.145.10.80 > 172.16.1.49.3957: . 1:1461(1460) ack 478 
win 6432 (DF)
00:49:34.679053 p508FBF0C.dip.t-dialin.net.4662 > 172.16.1.49.3913: R 
1691545602:1691545602(0) win 0
00:49:35.003297 lns-th2-1-82-64-3-89.adsl.proxad.net.4662 > 
172.16.1.49.3944: P 1:69(68) ack 102 win 65434 (DF)
00:49:35.410320 p50859AEB.dip.t-dialin.net.4662 > 172.16.1.49.3917: R 
1990823419:1990823419(0) win 0
00:49:36.074391 202-178-204-115.cm.dynamic.apol.com.tw.4662 > 
172.16.1.49.3764: R 2735723505:2735723505(0) win 0
00:49:36.728801 arp who-has 172.16.1.49 tell hdl
00:49:36.746770 lns-th2-1-82-64-3-89.adsl.proxad.net.4662 > 
172.16.1.49.3944: P 69:141(72) ack 170 win 65366 (DF)
00:49:36.883775 80.242.145.10.80 > 172.16.1.49.3929: . ack 324 win 6432 (DF)
00:49:38.475140 lns-th2-1-82-64-3-89.adsl.proxad.net.4662 > 
172.16.1.49.3944: P 141:230(89) ack 206 win 65330 (DF)
00:49:40.452154 lns-th2-1-82-64-3-89.adsl.proxad.net.4662 > 
172.16.1.49.3944: P 230:255(25) ack 228 win 65308 (DF)
00:49:41.088094 25.Red-217-125-232.pooles.rima-tde.net.4662 > 
172.16.1.49.3939: . ack 290 win 17039 (DF)
00:49:41.398492 dsl-082-083-147-047.arcor-ip.net.4662 > 172.16.1.49.3921: F 
251:251(0) ack 291 win 32831 (DF)








Mehr Informationen über die Mailingliste Berlin