• [^] # Re: On sais jamais...

    Posté par . En réponse au message Défaut d'accès réseau filaire en changeant de LAN. Évalué à 2.

    Ci-dessous un tcpdump -n un peu plus long.
    tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
    listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
    15:50:57.756036 ARP, Request who-has 192.168.50.1 tell 192.168.50.12, length 28
    15:52:01.262570 IP 192.168.50.100 > 224.0.0.1: ICMP echo request, id 0, seq 0, length 40
    15:52:50.760030 ARP, Request who-has 192.168.50.1 tell 192.168.50.12, length 28
    15:52:51.760034 ARP, Request who-has 192.168.50.1 tell 192.168.50.12, length 28
    15:52:52.600286 IP6 fe80::20b:97ff:fea0:bc1f.5353 > ff02::fb.5353: 0 [3q][|domain]
    15:52:52.600458 IP 192.168.50.12.5353 > 224.0.0.251.5353: 0 [3q] PTR (QM)? _http._tcp.local. PTR (QM)? _ftp._tcp.local.[|domain]
    15:52:52.760038 ARP, Request who-has 192.168.50.1 tell 192.168.50.12, length 28
    15:54:50.760032 ARP, Request who-has 192.168.50.1 tell 192.168.50.12, length 28
    15:54:50.760663 ARP, Reply 192.168.50.1 is-at 00:22:b0:89:05:68, length 46
    15:54:50.760675 IP 192.168.50.12.34861 > 192.168.50.1.80: Flags [P.], seq 3738846783:3738847180, ack 2458630106, win 46, options [nop,nop,TS val 131189 ecr 24647403], length 397
    15:56:50.756083 IP 192.168.50.12.34861 > 192.168.50.1.80: Flags [P.], seq 0:397, ack 1, win 46, options [nop,nop,TS val 161189 ecr 24647403], length 397
    15:56:51.756039 ARP, Request who-has 192.168.50.12 tell 192.168.50.1, length 46
    15:56:51.756060 ARP, Reply 192.168.50.12 is-at 00:0b:97:a0:bc:1f, length 28
    15:56:51.756688 IP 192.168.50.1.80 > 192.168.50.12.34861: Flags [.], ack 397, win 5792, options [nop,nop,TS val 24691451 ecr 161189,nop,nop,sack 1 {0:397}], length 0
    15:57:08.604273 IP6 fe80::20b:97ff:fea0:bc1f.5353 > ff02::fb.5353: 0 [3q][|domain]
    15:57:08.604444 IP 192.168.50.12.5353 > 224.0.0.251.5353: 0 [3q] PTR (QM)? _http._tcp.local. PTR (QM)? _ftp._tcp.local.[|domain]
    15:57:32.019943 IP 192.168.50.1.2053 > 239.255.255.250.1900: UDP, length 309
    15:57:33.013433 IP 192.168.50.1.2053 > 239.255.255.250.1900: UDP, length 380
    15:57:33.119433 IP 192.168.50.1.2053 > 239.255.255.250.1900: UDP, length 380
    15:57:33.673531 IP 192.168.50.1.2053 > 239.255.255.250.1900: UDP, length 362
    15:57:33.779309 IP 192.168.50.1.2053 > 239.255.255.250.1900: UDP, length 362
    15:59:01.864257 IP 192.168.50.1.80 > 192.168.50.12.34860: Flags [.], seq 2430655162:2430656610, ack 3392990277, win 5792, options [nop,nop,TS val 24704564 ecr 50338], length 1448
    15:59:01.864350 IP 192.168.50.12.34860 > 192.168.50.1.80: Flags [.], ack 1448, win 175, options [nop,nop,TS val 193966 ecr 24704564,nop,nop,sack 1 {4344:7240}], length 0
    15:59:02.074165 IP 192.168.50.1.80 > 192.168.50.12.34860: Flags [.], seq 1448:2896, ack 1, win 5792, options [nop,nop,TS val 24704585 ecr 193966], length 1448
    15:59:02.074238 IP 192.168.50.12.34860 > 192.168.50.1.80: Flags [.], ack 2896, win 198, options [nop,nop,TS val 194018 ecr 24704585,nop,nop,sack 1 {4344:7240}], length 0
    15:59:02.284121 IP 192.168.50.1.80 > 192.168.50.12.34860: Flags [.], seq 2896:4344, ack 1, win 5792, options [nop,nop,TS val 24704606 ecr 194018], length 1448
    15:59:02.284195 IP 192.168.50.12.34860 > 192.168.50.1.80: Flags [.], ack 7240, win 220, options [nop,nop,TS val 194071 ecr 24704606], length 0
    15:59:06.864030 ARP, Request who-has 192.168.50.1 tell 192.168.50.12, length 28
    15:59:07.864035 ARP, Request who-has 192.168.50.1 tell 192.168.50.12, length 28
    15:59:08.864031 ARP, Request who-has 192.168.50.1 tell 192.168.50.12, length 28
    15:59:28.949563 IP 192.168.50.1.80 > 192.168.50.12.34860: Flags [.], seq 7240:8688, ack 1, win 5792, options [nop,nop,TS val 24707273 ecr 194071], length 1448
    15:59:28.952034 ARP, Request who-has 192.168.50.1 tell 192.168.50.12, length 28
    15:59:29.952036 ARP, Request who-has 192.168.50.1 tell 192.168.50.12, length 28
    15:59:30.952033 ARP, Request who-has 192.168.50.1 tell 192.168.50.12, length 28
    16:00:05.823102 ARP, Request who-has 192.168.50.12 tell 192.168.50.1, length 46
    16:00:05.823124 ARP, Reply 192.168.50.12 is-at 00:0b:97:a0:bc:1f, length 28
    16:00:57.573932 ARP, Request who-has 192.168.50.12 tell 192.168.50.1, length 46
    16:00:57.573954 ARP, Reply 192.168.50.12 is-at 00:0b:97:a0:bc:1f, length 28

    38 packets captured
    38 packets received by filter
    0 packets dropped by kernel

    Je vais installer arping et voir ce que ça me raconte...
    Merci.