m29
(usa Ubuntu)
Enviado em 10/10/2012 - 12:20h
root@michel:/home/michel# telnet 177.xxx.xxx.xxx 80
Trying 177.xxx.xxx.xxx...
Connected to 177.xxx.xxx.xxx.
Escape character is '^]'.
HTTP/1.1 400 Bad Request
Server: micro_httpd
Cache-Control: no-cache
Date: Thu, 01 Jan 1970 09:39:44 GMT
Content-Type: text/html
Connection: close
<HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD>
<BODY BGCOLOR="#cc9999"><H4>400 Bad Request</H4>
No request found.
<HR>
<ADDRESS><A HREF="http://www.acme.com/software/micro_httpd/">micro_httpd</A></ADDRESS>
</BODY></HTML>
Connection closed by foreign host
root@michel:/home/michel# root@mbcti:/home/michel# tcpdump -nli any host SEU 192.168.1.31
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on any, link-type LINUX_SLL (Linux cooked), capture size 96 bytes
12:12:47.792459 IP 122.226.56.20.6000 > 192.168.1.31.1433: Flags [S], seq 642252800, win 16384, options [mss 1452], length 0
12:12:47.792510 IP 192.168.1.31.1433 > 122.226.56.20.6000: Flags [R.], seq 0, ack 642252801, win 0, length 0
12:12:52.791428 ARP, Request who-has 192.168.1.31 tell 192.168.1.1, length 46
12:12:52.791453 ARP, Reply 192.168.1.31 is-at c8:9c:dc:4f:b1:32, length 28
12:13:13.547355 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [P.], seq 437205207:437206213, ack 1440683668, win 64800, options [nop,nop,TS val 419541658 ecr 386587], length 1006
12:13:13.587815 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [.], ack 1006, win 64020, options [nop,nop,TS val 395832 ecr 419541658], length 0
12:13:13.600723 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [.], seq 1:1441, ack 1006, win 64020, options [nop,nop,TS val 395835 ecr 419541658], length 1440
12:13:13.600754 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [P.], seq 1441:2763, ack 1006, win 64020, options [nop,nop,TS val 395835 ecr 419541658], length 1322
12:13:13.838487 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [.], ack 2763, win 64800, options [nop,nop,TS val 419541688 ecr 395835], length 0
12:13:13.842499 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [P.], seq 1006:1754, ack 2763, win 64800, options [nop,nop,TS val 419541688 ecr 395835], length 748
12:13:13.842544 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [.], ack 1754, win 64020, options [nop,nop,TS val 395895 ecr 419541688], length 0
12:13:13.996541 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [.], seq 2763:4203, ack 1754, win 64020, options [nop,nop,TS val 395934 ecr 419541688], length 1440
12:13:13.996576 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [P.], seq 4203:5524, ack 1754, win 64020, options [nop,nop,TS val 395934 ecr 419541688], length 1321
12:13:14.235143 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [.], ack 5524, win 64800, options [nop,nop,TS val 419541728 ecr 395934], length 0
12:14:11.955707 IP 192.168.1.31.58751 > 192.168.1.1.53: 17752+[|domain]
12:14:12.001512 IP 192.168.1.1.53 > 192.168.1.31.58751: 17752 7/0/0[|domain]
12:14:12.002113 IP 192.168.1.31.33958 > 173.194.74.100.80: Flags [S], seq 1269365614, win 5840, options [mss 1460,sackOK,TS val 410435 ecr 0,nop,wscale 6], length 0
12:14:12.191184 IP 173.194.74.100.80 > 192.168.1.31.33958: Flags [S.], seq 3161078039, ack 1269365615, win 14180, options [mss 1430,sackOK,TS val 423362033 ecr 410435,nop,wscale 6], length 0
12:14:12.191241 IP 192.168.1.31.33958 > 173.194.74.100.80: Flags [.], ack 1, win 92, options [nop,nop,TS val 410482 ecr 423362033], length 0
12:14:12.191401 IP 192.168.1.31.33958 > 173.194.74.100.80: Flags [P.], seq 1:951, ack 1, win 92, options [nop,nop,TS val 410483 ecr 423362033], length 950
12:14:12.393632 IP 173.194.74.100.80 > 192.168.1.31.33958: Flags [.], ack 951, win 252, options [nop,nop,TS val 423362236 ecr 410483], length 0
12:14:12.402672 IP 173.194.74.100.80 > 192.168.1.31.33958: Flags [P.], seq 1:1210, ack 951, win 252, options [nop,nop,TS val 423362240 ecr 410483], length 1209
12:14:12.402698 IP 192.168.1.31.33958 > 173.194.74.100.80: Flags [.], ack 1210, win 137, options [nop,nop,TS val 410535 ecr 423362240], length 0
12:14:12.445225 IP 192.168.1.31.50320 > 192.168.1.1.53: 59692+ A? safebrowsing-cache.google.com. (47)
12:14:12.489506 IP 192.168.1.1.53 > 192.168.1.31.50320: 59692 7/0/0[|domain]
12:14:12.490096 IP 192.168.1.31.39623 > 173.194.68.100.80: Flags [S], seq 3177849416, win 5840, options [mss 1460,sackOK,TS val 410557 ecr 0,nop,wscale 6], length 0
12:14:12.678234 IP 173.194.68.100.80 > 192.168.1.31.39623: Flags [S.], seq 1470290992, ack 3177849417, win 14180, options [mss 1430,sackOK,TS val 3689333820 ecr 410557,nop,wscale 6], length 0
12:14:12.678289 IP 192.168.1.31.39623 > 173.194.68.100.80: Flags [.], ack 1, win 92, options [nop,nop,TS val 410604 ecr 3689333820], length 0
12:14:12.678450 IP 192.168.1.31.39623 > 173.194.68.100.80: Flags [P.], seq 1:692, ack 1, win 92, options [nop,nop,TS val 410604 ecr 3689333820], length 691
12:14:12.880374 IP 173.194.68.100.80 > 192.168.1.31.39623: Flags [.], seq 1:1419, ack 692, win 244, options [nop,nop,TS val 3689334019 ecr 410604], length 1418
12:14:12.880419 IP 192.168.1.31.39623 > 173.194.68.100.80: Flags [.], ack 1419, win 137, options [nop,nop,TS val 410655 ecr 3689334019], length 0
12:14:12.886343 IP 173.194.68.100.80 > 192.168.1.31.39623: Flags [.], seq 1419:2837, ack 692, win 244, options [nop,nop,TS val 3689334019 ecr 410604], length 1418
12:14:12.886369 IP 192.168.1.31.39623 > 173.194.68.100.80: Flags [.], ack 2837, win 182, options [nop,nop,TS val 410656 ecr 3689334019], length 0
12:14:12.890204 IP 173.194.68.100.80 > 192.168.1.31.39623: Flags [P.], seq 2837:3729, ack 692, win 244, options [nop,nop,TS val 3689334019 ecr 410604], length 892
12:14:12.890230 IP 192.168.1.31.39623 > 173.194.68.100.80: Flags [.], ack 3729, win 227, options [nop,nop,TS val 410657 ecr 3689334019], length 0
12:14:12.890372 IP 173.194.68.100.80 > 192.168.1.31.39623: Flags [.], ack 692, win 244, options [nop,nop,TS val 3689334019 ecr 410604], length 0
12:14:12.890390 IP 192.168.1.31.39623 > 173.194.68.100.80: Flags [.], ack 3729, win 227, options [nop,nop,TS val 410657 ecr 3689334019], length 0
12:14:12.995884 IP 192.168.1.31.39623 > 173.194.68.100.80: Flags [P.], seq 692:1386, ack 3729, win 227, options [nop,nop,TS val 410684 ecr 3689334019], length 694
12:14:13.193978 IP 173.194.68.100.80 > 192.168.1.31.39623: Flags [P.], seq 3729:4408, ack 1386, win 265, options [nop,nop,TS val 3689334335 ecr 410684], length 679
12:14:13.194022 IP 192.168.1.31.39623 > 173.194.68.100.80: Flags [.], ack 4408, win 272, options [nop,nop,TS val 410733 ecr 3689334335], length 0
12:14:13.196869 IP 192.168.1.31.39623 > 173.194.68.100.80: Flags [P.], seq 1386:2069, ack 4408, win 272, options [nop,nop,TS val 410734 ecr 3689334335], length 683
12:14:13.397304 IP 173.194.68.100.80 > 192.168.1.31.39623: Flags [.], seq 4408:5826, ack 2069, win 287, options [nop,nop,TS val 3689334536 ecr 410734], length 1418
12:14:13.402963 IP 173.194.68.100.80 > 192.168.1.31.39623: Flags [.], seq 5826:7244, ack 2069, win 287, options [nop,nop,TS val 3689334536 ecr 410734], length 1418
12:14:13.402998 IP 192.168.1.31.39623 > 173.194.68.100.80: Flags [.], ack 7244, win 362, options [nop,nop,TS val 410785 ecr 3689334536], length 0
12:14:13.407860 IP 173.194.68.100.80 > 192.168.1.31.39623: Flags [P.], seq 7244:8369, ack 2069, win 287, options [nop,nop,TS val 3689334536 ecr 410734], length 1125
12:14:13.425120 IP 192.168.1.31.39623 > 173.194.68.100.80: Flags [P.], seq 2069:2770, ack 8369, win 408, options [nop,nop,TS val 410791 ecr 3689334536], length 701
12:14:13.625468 IP 173.194.68.100.80 > 192.168.1.31.39623: Flags [.], seq 8369:9787, ack 2770, win 309, options [nop,nop,TS val 3689334764 ecr 410791], length 1418
12:14:13.629062 IP 173.194.68.100.80 > 192.168.1.31.39623: Flags [P.], seq 9787:10600, ack 2770, win 309, options [nop,nop,TS val 3689334764 ecr 410791], length 813
12:14:13.629092 IP 192.168.1.31.39623 > 173.194.68.100.80: Flags [.], ack 10600, win 497, options [nop,nop,TS val 410842 ecr 3689334764], length 0
12:14:13.633571 IP 192.168.1.31.39623 > 173.194.68.100.80: Flags [P.], seq 2770:3451, ack 10600, win 497, options [nop,nop,TS val 410843 ecr 3689334764], length 681
12:14:13.833144 IP 173.194.68.100.80 > 192.168.1.31.39623: Flags [.], seq 10600:12018, ack 3451, win 331, options [nop,nop,TS val 3689334972 ecr 410843], length 1418
12:14:13.839031 IP 173.194.68.100.80 > 192.168.1.31.39623: Flags [.], seq 12018:13436, ack 3451, win 331, options [nop,nop,TS val 3689334972 ecr 410843], length 1418
12:14:13.839061 IP 192.168.1.31.39623 > 173.194.68.100.80: Flags [.], ack 13436, win 588, options [nop,nop,TS val 410894 ecr 3689334972], length 0
12:14:13.844937 IP 173.194.68.100.80 > 192.168.1.31.39623: Flags [.], seq 13436:14854, ack 3451, win 331, options [nop,nop,TS val 3689334972 ecr 410843], length 1418
12:14:13.846047 IP 173.194.68.100.80 > 192.168.1.31.39623: Flags [P.], seq 14854:15006, ack 3451, win 331, options [nop,nop,TS val 3689334972 ecr 410843], length 152
12:14:13.846083 IP 192.168.1.31.39623 > 173.194.68.100.80: Flags [.], ack 15006, win 677, options [nop,nop,TS val 410896 ecr 3689334972], length 0
12:14:13.846522 IP 173.194.68.100.80 > 192.168.1.31.39623: Flags [P.], seq 15006:15038, ack 3451, win 331, options [nop,nop,TS val 3689334972 ecr 410843], length 32
12:14:13.858524 IP 192.168.1.31.39623 > 173.194.68.100.80: Flags [P.], seq 3451:4145, ack 15038, win 677, options [nop,nop,TS val 410899 ecr 3689334972], length 694
12:14:14.056290 IP 173.194.68.100.80 > 192.168.1.31.39623: Flags [P.], seq 15038:15906, ack 4145, win 353, options [nop,nop,TS val 3689335198 ecr 410899], length 868
12:14:14.095243 IP 192.168.1.31.39623 > 173.194.68.100.80: Flags [.], ack 15906, win 721, options [nop,nop,TS val 410959 ecr 3689335198], length 0
12:14:14.716004 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [P.], seq 1754:2004, ack 5524, win 64800, options [nop,nop,TS val 419547775 ecr 395934], length 250
12:14:14.716043 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [.], ack 2004, win 64020, options [nop,nop,TS val 411114 ecr 419547775], length 0
12:14:14.739440 IP 192.168.1.31.33334 > 192.168.1.1.53: 56589+[|domain]
12:14:14.740074 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [.], seq 5524:6964, ack 2004, win 64020, options [nop,nop,TS val 411120 ecr 419547775], length 1440
12:14:14.740107 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [P.], seq 6964:8285, ack 2004, win 64020, options [nop,nop,TS val 411120 ecr 419547775], length 1321
12:14:14.740172 IP 192.168.1.1.53 > 192.168.1.31.33334: 56589-[|domain]
12:14:14.978887 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [.], ack 8285, win 64800, options [nop,nop,TS val 419547802 ecr 411120], length 0
12:14:17.000656 ARP, Request who-has 192.168.1.31 tell 192.168.1.1, length 46
12:14:17.000680 ARP, Reply 192.168.1.31 is-at c8:9c:dc:4f:b1:32, length 28
12:14:29.983406 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [P.], seq 2004:2583, ack 8285, win 64800, options [nop,nop,TS val 419549303 ecr 411120], length 579
12:14:30.023616 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [.], seq 8285:9725, ack 2583, win 64020, options [nop,nop,TS val 414941 ecr 419549303], length 1440
12:14:30.023650 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [P.], seq 9725:11048, ack 2583, win 64020, options [nop,nop,TS val 414941 ecr 419549303], length 1323
12:14:30.261745 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [.], ack 11048, win 64800, options [nop,nop,TS val 419549331 ecr 414941], length 0
12:14:30.264744 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [P.], seq 2583:3161, ack 11048, win 64800, options [nop,nop,TS val 419549331 ecr 414941], length 578
12:14:30.303233 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [.], ack 3161, win 64020, options [nop,nop,TS val 415011 ecr 419549331], length 0
12:14:30.336093 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [.], seq 11048:12488, ack 3161, win 64020, options [nop,nop,TS val 415019 ecr 419549331], length 1440
12:14:30.336126 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [P.], seq 12488:13810, ack 3161, win 64020, options [nop,nop,TS val 415019 ecr 419549331], length 1322
12:14:30.574387 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [.], ack 13810, win 64800, options [nop,nop,TS val 419549362 ecr 415019], length 0
12:15:30.702225 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [P.], seq 3161:3413, ack 13810, win 64800, options [nop,nop,TS val 419555374 ecr 415019], length 252
12:15:30.702266 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [.], ack 3413, win 64020, options [nop,nop,TS val 430110 ecr 419555374], length 0
12:15:30.725123 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [.], seq 13810:15250, ack 3413, win 64020, options [nop,nop,TS val 430116 ecr 419555374], length 1440
12:15:30.725152 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [P.], seq 15250:16573, ack 3413, win 64020, options [nop,nop,TS val 430116 ecr 419555374], length 1323
12:15:30.962618 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [.], ack 16573, win 64800, options [nop,nop,TS val 419555401 ecr 430116], length 0
12:15:49.015076 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [P.], seq 3413:4016, ack 16573, win 64800, options [nop,nop,TS val 419557206 ecr 430116], length 603
12:15:49.044288 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [.], seq 16573:18013, ack 4016, win 64020, options [nop,nop,TS val 434696 ecr 419557206], length 1440
12:15:49.044323 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [P.], seq 18013:19336, ack 4016, win 64020, options [nop,nop,TS val 434696 ecr 419557206], length 1323
12:15:49.281777 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [.], ack 19336, win 64800, options [nop,nop,TS val 419557233 ecr 434696], length 0
12:16:07.404495 IP 192.168.1.31.33958 > 173.194.74.100.80: Flags [F.], seq 951, ack 1210, win 137, options [nop,nop,TS val 439286 ecr 423362240], length 0
12:16:07.591475 IP 173.194.74.100.80 > 192.168.1.31.33958: Flags [F.], seq 1210, ack 952, win 252, options [nop,nop,TS val 423477437 ecr 439286], length 0
12:16:07.591514 IP 192.168.1.31.33958 > 173.194.74.100.80: Flags [.], ack 1211, win 137, options [nop,nop,TS val 439332 ecr 423477437], length 0
12:16:09.404520 IP 192.168.1.31.39623 > 173.194.68.100.80: Flags [F.], seq 4145, ack 15906, win 721, options [nop,nop,TS val 439786 ecr 3689335198], length 0
12:16:09.588317 IP 173.194.68.100.80 > 192.168.1.31.39623: Flags [F.], seq 15906, ack 4146, win 353, options [nop,nop,TS val 3689450737 ecr 439786], length 0
12:16:09.588357 IP 192.168.1.31.39623 > 173.194.68.100.80: Flags [.], ack 15907, win 721, options [nop,nop,TS val 439832 ecr 3689450737], length 0
12:16:12.590460 ARP, Request who-has 192.168.1.31 tell 192.168.1.1, length 46
12:16:12.590485 ARP, Reply 192.168.1.31 is-at c8:9c:dc:4f:b1:32, length 28
12:16:39.760073 IP 192.168.1.31.36574 > 192.168.1.1.53: 35295+[|domain]
12:16:39.760808 IP 192.168.1.1.53 > 192.168.1.31.36574: 35295-[|domain]
12:16:39.761207 IP 192.168.1.31.55680 > 65.54.61.172.80: Flags [S], seq 2416127545, win 5840, options [mss 1460,sackOK,TS val 447375 ecr 0,nop,wscale 6], length 0
12:16:39.964695 IP 65.54.61.172.80 > 192.168.1.31.55680: Flags [S.], seq 992864611, ack 2416127546, win 8192, options [mss 1452,sackOK,TS val 419562301 ecr 447375], length 0
12:16:39.964740 IP 192.168.1.31.55680 > 65.54.61.172.80: Flags [.], ack 1, win 5840, options [nop,nop,TS val 447426 ecr 419562301], length 0
12:16:39.964938 IP 192.168.1.31.55680 > 65.54.61.172.80: Flags [.], seq 1:1441, ack 1, win 5840, options [nop,nop,TS val 447426 ecr 419562301], length 1440
12:16:39.964969 IP 192.168.1.31.55680 > 65.54.61.172.80: Flags [.], seq 1441:2881, ack 1, win 5840, options [nop,nop,TS val 447426 ecr 419562301], length 1440
12:16:39.964981 IP 192.168.1.31.55680 > 65.54.61.172.80: Flags [P.], seq 2881:3227, ack 1, win 5840, options [nop,nop,TS val 447426 ecr 419562301], length 346
12:16:40.208321 IP 65.54.61.172.80 > 192.168.1.31.55680: Flags [.], ack 2881, win 64800, options [nop,nop,TS val 419562325 ecr 447426], length 0
12:16:40.214805 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [P.], seq 4016:4268, ack 19336, win 64800, options [nop,nop,TS val 419562326 ecr 434696], length 252
12:16:40.220212 IP 65.54.61.172.80 > 192.168.1.31.55680: Flags [P.], seq 1:253, ack 3227, win 64454, options [nop,nop,TS val 419562326 ecr 447426], length 252
12:16:40.220247 IP 192.168.1.31.55680 > 65.54.61.172.80: Flags [.], ack 253, win 6432, options [nop,nop,TS val 447490 ecr 419562326], length 0
12:16:40.233607 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [.], seq 19336:20776, ack 4268, win 64020, options [nop,nop,TS val 447493 ecr 419562326], length 1440
12:16:40.233640 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [P.], seq 20776:22099, ack 4268, win 64020, options [nop,nop,TS val 447493 ecr 419562326], length 1323
12:16:40.471243 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [.], ack 22099, win 64800, options [nop,nop,TS val 419562352 ecr 447493], length 0
12:16:40.474743 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [P.], seq 4268:5019, ack 22099, win 64800, options [nop,nop,TS val 419562352 ecr 447493], length 751
12:16:40.506908 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [.], seq 22099:23539, ack 5019, win 64020, options [nop,nop,TS val 447561 ecr 419562352], length 1440
12:16:40.506939 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [P.], seq 23539:24862, ack 5019, win 64020, options [nop,nop,TS val 447561 ecr 419562352], length 1323
12:16:40.744717 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [.], ack 24862, win 64800, options [nop,nop,TS val 419562379 ecr 447561], length 0
12:16:44.760016 ARP, Request who-has 192.168.1.31 tell 192.168.1.1, length 46
12:16:44.760039 ARP, Reply 192.168.1.31 is-at c8:9c:dc:4f:b1:32, length 28
12:16:48.734496 IP 192.168.1.31.50085 > 192.168.1.1.53: 48643+ A? sn129w.snt129.mail.live.com. (45)
12:16:48.734732 IP 192.168.1.31.55625 > 192.168.1.1.53: 8104+ A? mail.live.com. (31)
12:16:48.734844 IP 192.168.1.31.47588 > 192.168.1.1.53: 35821+ A? skydrive.live.com. (35)
12:16:48.779325 IP 192.168.1.1.53 > 192.168.1.31.50085: 48643 4/0/0[|domain]
12:16:48.779876 IP 192.168.1.31.52560 > 192.168.1.1.53: 41752+ A? profile.live.com. (34)
12:16:48.781739 IP 192.168.1.1.53 > 192.168.1.31.55625: 8104 3/0/0 CNAME[|domain]
12:16:48.783651 IP 192.168.1.1.53 > 192.168.1.31.47588: 35821 2/0/0 CNAME[|domain]
12:16:48.826392 IP 192.168.1.1.53 > 192.168.1.31.52560: 41752 2/0/0 CNAME[|domain]
12:16:50.333794 IP 192.168.1.31.55680 > 65.54.61.172.80: Flags [.], seq 3227:4667, ack 253, win 6432, options [nop,nop,TS val 450018 ecr 419562326], length 1440
12:16:50.333827 IP 192.168.1.31.55680 > 65.54.61.172.80: Flags [.], seq 4667:6107, ack 253, win 6432, options [nop,nop,TS val 450018 ecr 419562326], length 1440
12:16:50.333839 IP 192.168.1.31.55680 > 65.54.61.172.80: Flags [P.], seq 6107:6236, ack 253, win 6432, options [nop,nop,TS val 450018 ecr 419562326], length 129
12:16:50.574445 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [P.], seq 5019:5270, ack 24862, win 64800, options [nop,nop,TS val 419563362 ecr 447561], length 251
12:16:50.574903 IP 65.54.61.172.80 > 192.168.1.31.55680: Flags [.], ack 6107, win 64800, options [nop,nop,TS val 419563362 ecr 450018], length 0
12:16:50.580093 IP 65.54.61.172.80 > 192.168.1.31.55680: Flags [P.], seq 253:504, ack 6236, win 64671, options [nop,nop,TS val 419563362 ecr 450018], length 251
12:16:50.580128 IP 192.168.1.31.55680 > 65.54.61.172.80: Flags [.], ack 504, win 7504, options [nop,nop,TS val 450080 ecr 419563362], length 0
12:16:50.593170 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [.], seq 24862:26302, ack 5270, win 64020, options [nop,nop,TS val 450083 ecr 419563362], length 1440
12:16:50.593198 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [P.], seq 26302:27624, ack 5270, win 64020, options [nop,nop,TS val 450083 ecr 419563362], length 1322
12:16:50.831132 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [.], ack 27624, win 64800, options [nop,nop,TS val 419563388 ecr 450083], length 0
12:17:01.949771 IP 192.168.1.31.55680 > 65.54.61.172.80: Flags [.], seq 6236:7676, ack 504, win 7504, options [nop,nop,TS val 452922 ecr 419563362], length 1440
12:17:01.949804 IP 192.168.1.31.55680 > 65.54.61.172.80: Flags [.], seq 7676:9116, ack 504, win 7504, options [nop,nop,TS val 452922 ecr 419563362], length 1440
12:17:01.949814 IP 192.168.1.31.55680 > 65.54.61.172.80: Flags [P.], seq 9116:9244, ack 504, win 7504, options [nop,nop,TS val 452922 ecr 419563362], length 128
12:17:02.190092 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [P.], seq 5270:5522, ack 27624, win 64800, options [nop,nop,TS val 419564523 ecr 450083], length 252
12:17:02.190808 IP 65.54.61.172.80 > 192.168.1.31.55680: Flags [.], ack 9116, win 64800, options [nop,nop,TS val 419564523 ecr 452922], length 0
12:17:02.195510 IP 65.54.61.172.80 > 192.168.1.31.55680: Flags [P.], seq 504:756, ack 9244, win 64672, options [nop,nop,TS val 419564523 ecr 452922], length 252
12:17:02.195552 IP 192.168.1.31.55680 > 65.54.61.172.80: Flags [.], ack 756, win 8576, options [nop,nop,TS val 452984 ecr 419564523], length 0
12:17:02.213342 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [.], seq 27624:29064, ack 5522, win 64020, options [nop,nop,TS val 452988 ecr 419564523], length 1440
12:17:02.213375 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [P.], seq 29064:30387, ack 5522, win 64020, options [nop,nop,TS val 452988 ecr 419564523], length 1323
12:17:02.451230 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [.], ack 30387, win 64800, options [nop,nop,TS val 419564550 ecr 452988], length 0
12:17:04.069085 IP 192.168.1.31.55680 > 65.54.61.172.80: Flags [.], seq 9244:10684, ack 756, win 8576, options [nop,nop,TS val 453452 ecr 419564523], length 1440
12:17:04.069117 IP 192.168.1.31.55680 > 65.54.61.172.80: Flags [.], seq 10684:12124, ack 756, win 8576, options [nop,nop,TS val 453452 ecr 419564523], length 1440
12:17:04.069131 IP 192.168.1.31.55680 > 65.54.61.172.80: Flags [P.], seq 12124:12321, ack 756, win 8576, options [nop,nop,TS val 453452 ecr 419564523], length 197
12:17:04.311230 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [P.], seq 5522:5773, ack 30387, win 64800, options [nop,nop,TS val 419564735 ecr 452988], length 251
12:17:04.311594 IP 65.54.61.172.80 > 192.168.1.31.55680: Flags [.], ack 12124, win 64800, options [nop,nop,TS val 419564735 ecr 453452], length 0
12:17:04.316766 IP 65.54.61.172.80 > 192.168.1.31.55680: Flags [P.], seq 756:1007, ack 12321, win 64603, options [nop,nop,TS val 419564735 ecr 453452], length 251
12:17:04.316810 IP 192.168.1.31.55680 > 65.54.61.172.80: Flags [.], ack 1007, win 9648, options [nop,nop,TS val 453514 ecr 419564735], length 0
12:17:04.329007 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [.], seq 30387:31827, ack 5773, win 64020, options [nop,nop,TS val 453517 ecr 419564735], length 1440
12:17:04.329041 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [P.], seq 31827:33149, ack 5773, win 64020, options [nop,nop,TS val 453517 ecr 419564735], length 1322
12:17:04.567543 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [.], ack 33149, win 64800, options [nop,nop,TS val 419564761 ecr 453517], length 0
12:18:04.727899 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [P.], seq 5773:6025, ack 33149, win 64800, options [nop,nop,TS val 419570777 ecr 453517], length 252
12:18:04.754891 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [.], seq 33149:34589, ack 6025, win 64020, options [nop,nop,TS val 468623 ecr 419570777], length 1440
12:18:04.754927 IP 192.168.1.31.55413 > 65.54.61.172.80: Flags [P.], seq 34589:35912, ack 6025, win 64020, options [nop,nop,TS val 468623 ecr 419570777], length 1323
12:18:04.992752 IP 65.54.61.172.80 > 192.168.1.31.55413: Flags [.], ack 35912, win 64800, options [nop,nop,TS val 419570804 ecr 468623], length 0
root@michel:/home/michel# tcpdump -nli any host 192.168.1.1
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on any, link-type LINUX_SLL (Linux cooked), capture size 96 bytes
12:10:35.615187 IP 192.168.1.31.50637 > 192.168.1.1.53: 6593+[|domain]
12:10:35.615934 IP 192.168.1.1.53 > 192.168.1.31.50637: 6593-[|domain]
12:10:40.615325 ARP, Request who-has 192.168.1.31 tell 192.168.1.1, length 46
12:10:40.615344 ARP, Reply 192.168.1.31 is-at c8:9c:dc:4f:b1:32, length 28
12:12:06.002843 IP 192.168.1.31.55174 > 192.168.1.1.53: 12419+ A? dynupdate.no-ip.com. (37)
12:12:06.047020 IP 192.168.1.1.53 > 192.168.1.31.55174: 12419 1/0/0 (53)
12:12:06.494061 IP 192.168.1.31.34200 > 192.168.1.1.53: 61182+ A? dynupdate.no-ip.com. (37)
12:12:06.494707 IP 192.168.1.1.53 > 192.168.1.31.34200: 61182- 1/0/0 (53)
12:12:11.046280 ARP, Request who-has 192.168.1.31 tell 192.168.1.1, length 46
12:12:11.046301 ARP, Reply 192.168.1.31 is-at c8:9c:dc:4f:b1:32, length 28
12:12:30.734698 IP 192.168.1.31.53131 > 192.168.1.1.53: 38545+ AAAA? SEU.Home. (26)
12:12:30.779330 IP 192.168.1.1.53 > 192.168.1.31.53131: 38545 NXDomain 0/1/0 (101)
12:12:30.779593 IP 192.168.1.31.34439 > 192.168.1.1.53: 27492+ A? SEU.Home. (26)
12:12:30.822705 IP 192.168.1.1.53 > 192.168.1.31.34439: 27492 NXDomain 0/1/0 (101)
12:12:52.791434 ARP, Request who-has 192.168.1.31 tell 192.168.1.1, length 46
12:12:52.791455 ARP, Reply 192.168.1.31 is-at c8:9c:dc:4f:b1:32, length 28
12:14:11.955726 IP 192.168.1.31.58751 > 192.168.1.1.53: 17752+[|domain]
12:14:12.001518 IP 192.168.1.1.53 > 192.168.1.31.58751: 17752 7/0/0[|domain]
12:14:12.445244 IP 192.168.1.31.50320 > 192.168.1.1.53: 59692+ A? safebrowsing-cache.google.com. (47)
12:14:12.489513 IP 192.168.1.1.53 > 192.168.1.31.50320: 59692 7/0/0[|domain]
12:14:14.739458 IP 192.168.1.31.33334 > 192.168.1.1.53: 56589+[|domain]
12:14:14.740175 IP 192.168.1.1.53 > 192.168.1.31.33334: 56589-[|domain]
12:14:17.000661 ARP, Request who-has 192.168.1.31 tell 192.168.1.1, length 46
12:14:17.000682 ARP, Reply 192.168.1.31 is-at c8:9c:dc:4f:b1:32, length 28
12:16:12.590466 ARP, Request who-has 192.168.1.31 tell 192.168.1.1, length 46
12:16:12.590487 ARP, Reply 192.168.1.31 is-at c8:9c:dc:4f:b1:32, length 28
12:16:39.760093 IP 192.168.1.31.36574 > 192.168.1.1.53: 35295+[|domain]
12:16:39.760815 IP 192.168.1.1.53 > 192.168.1.31.36574: 35295-[|domain]
12:16:44.760022 ARP, Request who-has 192.168.1.31 tell 192.168.1.1, length 46
12:16:44.760041 ARP, Reply 192.168.1.31 is-at c8:9c:dc:4f:b1:32, length 28
12:16:48.734510 IP 192.168.1.31.50085 > 192.168.1.1.53: 48643+ A? sn129w.snt129.mail.live.com. (45)
12:16:48.734746 IP 192.168.1.31.55625 > 192.168.1.1.53: 8104+ A? mail.live.com. (31)
12:16:48.734846 IP 192.168.1.31.47588 > 192.168.1.1.53: 35821+ A? skydrive.live.com. (35)
12:16:48.779336 IP 192.168.1.1.53 > 192.168.1.31.50085: 48643 4/0/0[|domain]
12:16:48.779889 IP 192.168.1.31.52560 > 192.168.1.1.53: 41752+ A? profile.live.com. (34)
12:16:48.781745 IP 192.168.1.1.53 > 192.168.1.31.55625: 8104 3/0/0 CNAME[|domain]
12:16:48.783655 IP 192.168.1.1.53 > 192.168.1.31.47588: 35821 2/0/0 CNAME[|domain]
12:16:48.826399 IP 192.168.1.1.53 > 192.168.1.31.52560: 41752 2/0/0 CNAME[|domain]
12:18:59.659065 IP 192.168.1.31.55306 > 192.168.1.1.53: 8243+ A? meuip.datahouse.com.br. (40)
12:18:59.702547 IP 192.168.1.1.53 > 192.168.1.31.55306: 8243 1/0/0 (56)
12:19:04.665752 ARP, Request who-has 192.168.1.31 tell 192.168.1.1, length 46
12:19:04.665771 ARP, Reply 192.168.1.31 is-at c8:9c:dc:4f:b1:32, length 28
e ai consegue entender alguma coisa?