• [^] # Re: Traceroute

    Posté par (Mastodon) . En réponse au message [RÉSOLU] Connexion SSH : je deviens dingue... Help !. Évalué à 3. Dernière modification le 01 avril 2021 à 09:25.

    Bon, j'ai mis tcpdump, tant pis, on a un truc, mais j'y comprends rien. Tu peux jeter un oeil stp ?

    # tcpdump -i tun0 'src 192.168.11.132'
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on tun0, link-type RAW (Raw IP), capture size 262144 bytes
18:13:07.637315 IP 192.168.11.132.46164 > 10.8.0.221.ssh: Flags [S], seq 330599139, win 64240, options [mss 1308,sackOK,TS val 2921873725 ecr 0,nop,wscale 7], length 0
18:13:08.642302 IP 192.168.11.132.46164 > 10.8.0.221.ssh: Flags [S], seq 330599139, win 64240, options [mss 1308,sackOK,TS val 2921874738 ecr 0,nop,wscale 7], length 0
18:13:10.732475 IP 192.168.11.132.46164 > 10.8.0.221.ssh: Flags [S], seq 330599139, win 64240, options [mss 1308,sackOK,TS val 2921876754 ecr 0,nop,wscale 7], length 0
18:13:14.788536 IP 192.168.11.132.46164 > 10.8.0.221.ssh: Flags [S], seq 330599139, win 64240, options [mss 1308,sackOK,TS val 2921880818 ecr 0,nop,wscale 7], length 0
18:13:22.913643 IP 192.168.11.132.46164 > 10.8.0.221.ssh: Flags [S], seq 330599139, win 64240, options [mss 1308,sackOK,TS val 2921889010 ecr 0,nop,wscale 7], length 0

    Et après j'ai le client qui part en timeout.

    Pour comparaison, si je lance le SSH depuis mon PC qui marche j'ai :

    # tcpdump -i tun0 'src 192.168.11.197'
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on tun0, link-type RAW (Raw IP), capture size 262144 bytes
18:15:40.632910 IP 192.168.11.197.47624 > 10.8.0.221.ssh: Flags [.], ack 633492880, win 501, options [nop,nop,TS val 3211209424 ecr 481193], length 0
18:15:42.197768 IP 192.168.11.197.47624 > 10.8.0.221.ssh: Flags [.], ack 1, win 501, options [nop,nop,TS val 3211211466 ecr 481225,nop,nop,sack 1 {4294967233:1}], length 0
18:15:42.198271 IP 192.168.11.197.47624 > 10.8.0.221.ssh: Flags [.], ack 1, win 501, options [nop,nop,TS val 3211211478 ecr 481257,nop,nop,sack 1 {4294967233:1}], length 0
18:15:46.288963 IP 192.168.11.197.47624 > 10.8.0.221.ssh: Flags [.], ack 209, win 501, options [nop,nop,TS val 3211215580 ecr 481630], length 0
18:15:46.289665 IP 192.168.11.197.47624 > 10.8.0.221.ssh: Flags [.], ack 209, win 501, options [nop,nop,TS val 3211215591 ecr 481677,nop,nop,sack 1 {1:209}], length 0
18:15:46.290148 IP 192.168.11.197.47624 > 10.8.0.221.ssh: Flags [.], ack 209, win 501, options [nop,nop,TS val 3211215606 ecr 481762,nop,nop,sack 1 {1:209}], length 0
18:15:46.423783 IP 192.168.11.197.47624 > 10.8.0.221.ssh: Flags [.], ack 769, win 501, options [nop,nop,TS val 3211215751 ecr 481827], length 0
18:15:46.789005 IP 192.168.11.197.47624 > 10.8.0.221.ssh: Flags [.], ack 1457, win 501, options [nop,nop,TS val 3211216157 ecr 481867], length 0
18:15:47.074308 IP 192.168.11.197.47702 > 10.8.0.221.ssh: Flags [S], seq 1859648379, win 64240, options [mss 1308,sackOK,TS val 3211216380 ecr 0,nop,wscale 7], length 0
18:15:47.254071 IP 192.168.11.197.47702 > 10.8.0.221.ssh: Flags [.], ack 3218373460, win 502, options [nop,nop,TS val 3211216538 ecr 481906], length 0
18:15:47.712887 IP 192.168.11.197.47624 > 10.8.0.221.ssh: Flags [.], seq 0:29, ack 1, win 501, options [nop,nop,TS val 3211216539 ecr 481906,[bad opt]>
18:15:47.714033 IP 192.168.11.197.47702 > 10.8.0.221.ssh: Flags [P.], seq 0:41, ack 1, win 502, options [nop,nop,TS val 3211217029 ecr 481906], length 41
18:15:47.884860 IP 192.168.11.197.47624 > 10.8.0.221.ssh: Flags [.], ack 1985, win 501, options [nop,nop,TS val 3211217195 ecr 481924], length 0
18:15:47.885389 IP 192.168.11.197.47702 > 10.8.0.221.ssh: Flags [.], ack 350, win 501, options [nop,nop,TS val 3211217210 ecr 481972], length 0

    En théorie, la théorie et la pratique c'est pareil. En pratique c'est pas vrai.