La Paste

2023-01-17 19:54:02

root@border:/usr/local/www/apache24/data # tcpdump -i vlan9 ip src 109.248.219.1
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vlan9, link-type EN10MB (Ethernet), capture size 262144 bytes
19:49:10.033596 IP border.interlink.md.45721 > unicorn.kvant.if.ua.http: Flags [S], seq 497914141, win 6                                                 5535, options [mss 1460,nop,wscale 6,sackOK,TS val 2909301229 ecr 0], length 0
19:49:10.035748 IP border.interlink.md.56760 > anysec.apnic.net.domain: 17002% [1au] A? 91.in-addr.arpa.                                                  (44)
19:49:10.156271 IP border.interlink.md > ec2-18-162-144-101.ap-east-1.compute.amazonaws.com: ICMP echo reply, id 2, seq 5481, length 16
19:49:10.353374 IP border.interlink.md.64987 > pri.authdns.ripe.net.domain: 9070% [1au] A? 230.91.in-addr.arpa. (48)
19:49:10.364518 IP border.interlink.md.10661 > 199.253.249.53.domain: 50463% [1au] A? 25.230.91.in-addr.arpa. (51)
19:49:10.559699 IP border.interlink.md.32362 > pch.ns.ua.domain: 56698% [1au] A? if.ua. (34)
19:49:10.559776 IP border.interlink.md.54957 > ho1.ns.ua.domain: 47690% [1au] A? if.ua. (34)
19:49:10.559851 IP border.interlink.md.30783 > ns2.tld.cloudns.net.domain: 57092% [1au] A? if.ua. (34)
19:49:10.576264 IP border.interlink.md.57031 > nn.ns.ua.domain: 43420% [1au] A? kvant.if.ua. (40)
19:49:10.577019 IP border.interlink.md.15236 > 67.221.255.42.domain: 52333% [1au] A? kvant.if.ua. (40)
19:49:10.627584 IP border.interlink.md.29051 > kenny.kvant.if.ua.domain: 33124% [1au] A? ns1.kvant.if.ua. (44)
19:49:10.628905 IP border.interlink.md.7252 > ns1.kvant.if.ua.domain: 26135% [1au] A? ns2.kvant.if.ua. (44)
19:49:10.652803 IP border.interlink.md.16973 > kenny.kvant.if.ua.domain: 5154% [1au] PTR? 72.25.230.91.in-addr.arpa. (54)
19:49:10.676875 IP border.interlink.md.44361 > 199.253.249.53.domain: 41028% [1au] DNSKEY? 91.in-addr.arpa. (44)
19:49:10.700095 IP border.interlink.md.64097 > ans1.6connect.com.domain: 57667% [1au] A? kvant.if.ua. (40)
19:49:10.878190 IP border.interlink.md.12277 > ns4.apnic.net.domain: 37934% [1au] DS? 230.91.in-addr.arpa. (48)
19:49:10.912315 IP border.interlink.md.48639 > ns.kvant.if.ua.domain: 31179% [1au] A? ns.kvant.if.ua. (43)
19:49:11.055890 IP border.interlink.md.39993 > anysec.apnic.net.domain: 22537% [1au] A? 203.in-addr.arpa. (45)
19:49:11.370430 IP border.interlink.md.43164 > 199.253.249.53.domain: 52432% [1au] A? 119.203.in-addr.arpa. (49)
19:49:11.565777 IP border.interlink.md.45242 > 199.253.249.53.domain: 10839% [1au] A? 86.119.203.in-addr.arpa. (52)
19:49:11.759014 IP border.interlink.md.41042 > ns4.apnic.net.domain: 11836% [1au] A? 101.86.119.203.in-addr.arpa. (56)
19:49:11.956052 IP border.interlink.md.18488 > ns4.apnic.net.domain: 22861% [1au] PTR? 101.86.119.203.in-addr.arpa. (56)
19:49:12.145906 IP border.interlink.md.37625 > apnic1.dnsnode.net.domain: 20667% [1au] DNSKEY? 203.in-addr.arpa. (45)
19:49:12.186181 IP border.interlink.md.31930 > ns2.apnic.net.domain: 49214% [1au] DS? 119.203.in-addr.arpa. (49)
19:49:12.231933 IP border.interlink.md.63364 > ns2.apnic.net.domain: 64830% [1au] DNSKEY? 86.119.203.in-addr.arpa. (52)
19:49:12.279001 IP border.interlink.md.17019 > c.in-addr-servers.arpa.domain: 45457% [1au] A? 18.in-addr.arpa. (44)
19:49:12.508325 IP border.interlink.md.65465 > u.arin.net.domain: 58753% [1au] A? 162.18.in-addr.arpa. (48)
^C19:49:12.508458 IP border.interlink.md.10728 > 199.212.0.108.domain: 8802% [1au] A? y.arin.net. (39)

28 packets captured