Re: Network (PPP or Masq) problems in 2.1.111 to 2.1.115

Chris Noe (stiker@northlink.com)
Thu, 13 Aug 1998 19:29:22 -0700 (MST)


On Sat, 8 Aug 1998, Michael Driscoll wrote:

> 13:24:17.598637 ulf.edgemail.com.1059 > www.4windsmj.com.www: F 1603523621:1603523621(0) ack 3415593706 win 32696 (DF)
> 13:24:17.810068 truncated-ip - 1 bytes missing!49.6.234.208 > www.4windsmj.com:
> (frag 17664:-15@320) [tos 0x3]
> 13:24:17.821704 ulf.edgemail.com.domain > d.root-servers.net.domain: 1911 (43)
> 13:24:18.090037 52.17.64.144 > d.root-servers.net: (frag 17664:-27@1256) [tos 0x3]
> 13:24:18.104930 ulf.edgemail.com.domain > g.root-servers.net.domain: 1912 (43)
> 13:24:18.410018 47.17.166.185 > g.root-servers.net: (frag 17664:-27@1256) [tos 0x3]
> 13:24:18.423035 ulf.edgemail.com.domain > XTAC-WHEELER.NIPR.MIL.domain: 1913 (43)
> 13:24:18.840036 46.17.240.222 > XTAC-WHEELER.NIPR.MIL: (frag 17664:-27@2544) [tos 0x3]
>
> Notice the general corruption of IP headers. This is on a PPP link, so
> obviously those random IP numbers like 52.17.64.144 should not be there :-)
> (My host is ulf.edgemail.com, 166.93.72.137). This is a connection
> originating from the masqing machine itself, though connections from
> other boxen through this one have the same results.
>
> I first noticed this about 2.1.111 or so (but it could have been happening
> sooner and I just never looked at the traceroutes). I tried upgrading
> to 2.1.115-ac1, and now the problem just seems worse, as TCP connections
> just seem to die after about 30k or so.
>
> Here's a longer traceroute for anyone wanting to pick out a pattern in
> the corruption or something. It ends with one of the TCP stalls I
> mentioned, this one after about 38592 bytes of the file went through.
> (The packets to/from www.4windsmj.com are the stalling connection).
>
> Anyone else seeing this problem? Should I just go back to 2.0.x (I
> hope not).
>
> BTW, this is BSD traceroute, which doesn't use AF_PACKET or whatever.
> Mike
>

2.1.115, UP, i586, 48mb ram.

Same exact problem here on my single user box. No masq, nothing special,
just ppp (as a module). Noticed this since 2.1.112, and it's making my
ppp connection nearly unusable (approx .5k sec, at best).

Problems persist even when vj-comp is disabled.

216.19.4.39 is my box, and this log is of me trying to d/l a gnome
screenshot from xabean2.ml.org (208.204.142.17). Somethin' freaky is
going on here, for sure. Where the hell are the 52.6.* addresses doing
here?

I noticed that I have _exactly_ the same frag counts (17664:-27), which
tells me that it isn't just line noise causing cksum errors.

13:10:51.075496 216.19.4.39.1063 > 208.204.142.17.www: S 1020364696:1020364696(0) win 32488 <mss 536,sackOK,timestamp 6650237 0,nop,wscale 0> (DF)
13:11:15.075492 216.19.4.39.1063 > 208.204.142.17.www: S 1020364696:1020364696(0) win 32488 <mss 536,sackOK,timestamp 6652637 0,nop,wscale 0> (DF)
13:12:03.075488 216.19.4.39.1063 > 208.204.142.17.www: S 1020364696:1020364696(0) win 32488 <mss 536,sackOK,timestamp 6657437 0,nop,wscale 0> (DF)
13:12:03.405480 52.6.146.49 > 208.204.142.17: (frag 17664:-27@352) [tos 0x3]
13:12:03.405602 216.19.4.39.1063 > 208.204.142.17.www: . ack 1676136336 win 32488 (DF)
13:12:03.406505 216.19.4.39.1063 > 208.204.142.17.www: P 0:322(322) ack 1 win 32488 (DF)
13:12:04.015515 52.6.80.28 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:04.015681 216.19.4.39.1063 > 208.204.142.17.www: . ack 537 win 31952 (DF)
13:12:04.165496 52.6.80.27 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:04.325490 216.19.4.39.1063 > 208.204.142.17.www: . ack 1073 win 31624 (DF)
13:12:04.825453 52.6.144.25 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:04.955518 52.6.144.24 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:04.955997 216.19.4.39.1063 > 208.204.142.17.www: . ack 2145 win 31624 (DF)
13:12:05.065487 52.6.144.23 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:05.425485 216.19.4.39.1063 > 208.204.142.17.www: . ack 2681 win 32696 (DF)
13:12:05.465466 52.6.144.22 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:05.605514 52.6.144.21 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:05.605689 216.19.4.39.1063 > 208.204.142.17.www: . ack 3753 win 31624 (DF)
13:12:05.685503 52.6.80.212 > 208.204.142.17: (frag 17664:-27@3072) [tos 0x3]
13:12:05.975485 216.19.4.39.1063 > 208.204.142.17.www: . ack 4097 win 32696 (DF)
13:12:06.085510 52.6.144.18 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:06.225474 52.6.144.17 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:06.225622 216.19.4.39.1063 > 208.204.142.17.www: . ack 5169 win 31624 (DF)
13:12:06.565469 52.6.144.16 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:06.705515 52.6.144.15 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:06.705773 216.19.4.39.1063 > 208.204.142.17.www: . ack 6241 win 31624 (DF)
13:12:06.875519 52.6.144.14 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:07.245492 216.19.4.39.1063 > 208.204.142.17.www: . ack 6777 win 32696 (DF)
13:12:07.255531 52.6.144.13 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:07.755491 216.19.4.39.1063 > 208.204.142.17.www: . ack 7313 win 32696 (DF)
13:12:09.525463 52.6.144.12 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:09.875523 52.6.81.192 > 208.204.142.17: (frag 17664:-27@1104) [tos 0x3]
13:12:09.875670 216.19.4.39.1063 > 208.204.142.17.www: . ack 7849 win 32160 (DF)
13:12:10.235473 52.6.144.9 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:10.235594 216.19.4.39.1063 > 208.204.142.17.www: . ack 7849 win 32160 (DF)
13:12:10.575494 52.6.144.8 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:10.575634 216.19.4.39.1063 > 208.204.142.17.www: . ack 7849 win 32160 (DF)
13:12:11.505501 52.6.144.7 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:11.506008 216.19.4.39.1063 > 208.204.142.17.www: . ack 7849 win 32160 (DF)
13:12:11.675480 52.6.144.6 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:11.675633 216.19.4.39.1063 > 208.204.142.17.www: . ack 7849 win 32160 (DF)
13:12:11.825499 52.6.144.5 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:11.828444 216.19.4.39.1063 > 208.204.142.17.www: . ack 7849 win 32160 (DF)
13:12:12.305514 52.6.144.4 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:12.305652 216.19.4.39.1063 > 208.204.142.17.www: . ack 7849 win 32160 (DF)
13:12:12.925502 52.6.144.3 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:12.925635 216.19.4.39.1063 > 208.204.142.17.www: . ack 7849 win 32160 (DF)
13:12:13.095468 52.6.144.2 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:13.095575 216.19.4.39.1063 > 208.204.142.17.www: . ack 7849 win 32160 (DF)
13:12:13.245499 52.6.144.1 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:13.245650 216.19.4.39.1063 > 208.204.142.17.www: . ack 12235 win 27774 (DF)
13:12:13.285497 52.6.81.182 > 208.204.142.17: (frag 17664:-27@1104) [tos 0x3]
13:12:13.285592 216.19.4.39.1063 > 208.204.142.17.www: . ack 12235 win 31624 (DF)
13:12:13.745485 52.6.143.255 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:13.915486 52.6.143.254 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:13.916755 216.19.4.39.1063 > 208.204.142.17.www: . ack 13307 win 31624 (DF)
13:12:16.125463 52.6.143.253 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:16.625484 216.19.4.39.1063 > 208.204.142.17.www: . ack 13843 win 32696 (DF)
13:12:36.375492 52.6.143.251 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:36.375604 216.19.4.39.1063 > 208.204.142.17.www: . ack 13843 win 32696 (DF)
13:12:39.005508 52.6.143.250 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
13:12:39.505489 216.19.4.39.1063 > 208.204.142.17.www: . ack 14379 win 32696 (DF)

Here's the tcpdump -x:

13:10:39.075494 216.19.4.39.1063 > 208.204.142.17.www: S 1020364696:1020364696(0) win 32488 <mss 536,sackOK,timestamp 6649037 0,nop,wscale 0> (DF)
4500 003c 070d 4000 4006 f896 d813 0427
d0cc 8e11 0427 0050 3cd1 8798 0000 0000
a002 7ee8 538f 0000 0204 0218 0402 080a
0065 74cd 0000 0000 0103 0300
13:10:48.975494 216.19.4.39.1056 > 208.204.142.17.www: P 746829330:746829652(322) ack 2712841274 win 32282 (DF)
4500 016a 070e 4000 4006 f767 d813 0427
d0cc 8e11 0420 0050 2c83 b612 a1b2 ac3a
5018 7e1a c929 0000 4745 5420 2f67 7468
656d 6573 2f54 6865 6d65 732e 6a70 6720
4854 5450
13:10:49.415465 243.6.211.87 > 208.204.142.17: (frag 17664:-27@320) [tos 0x3]
ff03 0021 4500 0028 b95f 0000 f306 d357
d0cc 8e11 d813 0427 0050 0420 a1b2 ac3a
0000 0000 5004 0000 226b 0000
13:10:51.075496 216.19.4.39.1063 > 208.204.142.17.www: S 1020364696:1020364696(0) win 32488 <mss 536,sackOK,timestamp 6650237 0,nop,wscale 0> (DF)
4500 003c 070f 4000 4006 f894 d813 0427
d0cc 8e11 0427 0050 3cd1 8798 0000 0000
a002 7ee8 4edf 0000 0204 0218 0402 080a
0065 797d 0000 0000 0103 0300
13:11:15.075492 216.19.4.39.1063 > 208.204.142.17.www: S 1020364696:1020364696(0) win 32488 <mss 536,sackOK,timestamp 6652637 0,nop,wscale 0> (DF)
4500 003c 0710 4000 4006 f893 d813 0427
d0cc 8e11 0427 0050 3cd1 8798 0000 0000
a002 7ee8 457f 0000 0204 0218 0402 080a
0065 82dd 0000 0000 0103 0300
13:12:03.075488 216.19.4.39.1063 > 208.204.142.17.www: S 1020364696:1020364696(0) win 32488 <mss 536,sackOK,timestamp 6657437 0,nop,wscale 0> (DF)
4500 003c 0711 4000 4006 f892 d813 0427
d0cc 8e11 0427 0050 3cd1 8798 0000 0000
a002 7ee8 32bf 0000 0204 0218 0402 080a
0065 959d 0000 0000 0103 0300
13:12:03.405480 52.6.146.49 > 208.204.142.17: (frag 17664:-27@352) [tos 0x3]
ff03 0021 4500 002c b982 0000 3406 9231
d0cc 8e11 d813 0427 0050 0427 63e7 cf8f
3cd1 8799 6012 7fe0 e460 0000 0204 0218
13:12:03.405602 216.19.4.39.1063 > 208.204.142.17.www: . ack 1676136336 win 32488 (DF)
4500 0028 0712 4000 4006 f8a5 d813 0427
d0cc 8e11 0427 0050 3cd1 8799 63e7 cf90
5010 7ee8 f979 0000
13:12:03.406505 216.19.4.39.1063 > 208.204.142.17.www: P 0:322(322) ack 1 win 32488 (DF)
4500 016a 0713 4000 4006 f762 d813 0427
d0cc 8e11 0427 0050 3cd1 8799 63e7 cf90
5018 7ee8 00f5 0000 4745 5420 2f67 7468
656d 6573 2f54 6865 6d65 732e 6a70 6720
4854 5450
13:12:04.015515 52.6.80.28 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b983 4000 3406 501c
d0cc 8e11 d813 0427 0050 0427 63e7 cf90
3cd1 88db 5010 7fe0 2031 0000 4854 5450
2f31 2e31 2032 3030 204f 4b0d 0a44 6174
653a 2057
13:12:04.015681 216.19.4.39.1063 > 208.204.142.17.www: . ack 537 win 31952 (DF)
4500 0028 0714 4000 4006 f8a3 d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e7 d1a8
5010 7cd0 f837 0000
13:12:04.165496 52.6.80.27 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b984 4000 3406 501b
d0cc 8e11 d813 0427 0050 0427 63e7 d1a8
3cd1 88db 5010 7fe0 094a 0000 1532 6123
7181 91d1 f008 1624 4252 5492 a1b1 d217
3353 6272
13:12:04.325490 216.19.4.39.1063 > 208.204.142.17.www: . ack 1073 win 31624 (DF)
4500 0028 0715 4000 4006 f8a2 d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e7 d3c0
5010 7b88 f767 0000
13:12:04.825453 52.6.144.25 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b986 0000 3406 9019
d0cc 8e11 d813 0427 0050 0427 63e7 d3c0
3cd1 88db 5010 7fe0 d1a8 0000 dbf8 d16d
bef5 bc92 4545 da4d 1d66 5c2b a0ae af28
d1c7 2471
13:12:04.955518 52.6.144.24 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b987 0000 3406 9018
d0cc 8e11 d813 0427 0050 0427 63e7 d5d8
3cd1 88db 5010 7fe0 bceb 0000 2b13 9939
87ad 730f c766 fca3 8663 3307 35cc 08fe
dd9b f2b0
13:12:04.955997 216.19.4.39.1063 > 208.204.142.17.www: . ack 2145 win 31624 (DF)
4500 0028 0716 4000 4006 f8a1 d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e7 d7f0
5010 7b88 f337 0000
13:12:05.065487 52.6.144.23 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b988 0000 3406 9017
d0cc 8e11 d813 0427 0050 0427 63e7 d7f0
3cd1 88db 5010 7fe0 0efd 0000 e65f 8ecd
f958 5c5c 3d6b 997e 3b37 e561 7173 1eb6
cc7f 1d9b
13:12:05.425485 216.19.4.39.1063 > 208.204.142.17.www: . ack 2681 win 32696 (DF)
4500 0028 0717 4000 4006 f8a0 d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e7 da08
5010 7fb8 ecef 0000
13:12:05.465466 52.6.144.22 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b989 0000 3406 9016
d0cc 8e11 d813 0427 0050 0427 63e7 da08
3cd1 88db 5010 7fe0 b89b 0000 bf0f 10f2
21e4 69eb 7aff 00c6 66fc b385 c5c0 e6d5
f6fe da9b
13:12:05.605514 52.6.144.21 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b98a 0000 3406 9015
d0cc 8e11 d813 0427 0050 0427 63e7 dc20
3cd1 88db 5010 7fe0 e4b1 0000 4cd2 4682
9e8f 2e5a c692 46de 2fbb 8b02 2280 b737
dc4f 2b5b
13:12:05.605689 216.19.4.39.1063 > 208.204.142.17.www: . ack 3753 win 31624 (DF)
4500 0028 0718 4000 4006 f89f d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e7 de38
5010 7b88 ecef 0000
13:12:05.685503 52.6.80.212 > 208.204.142.17: (frag 17664:-27@3072) [tos 0x3]
ff03 0021 4500 0180 b98b 4000 3406 50d4
d0cc 8e11 d813 0427 0050 0427 63e7 de38
3cd1 88db 5018 7fe0 5ab8 0000 e32b f360
03d7 9967 e32b f360 03d7 9967 e32b f360
00e7 996d
13:12:05.975485 216.19.4.39.1063 > 208.204.142.17.www: . ack 4097 win 32696 (DF)
4500 0028 0719 4000 4006 f89e d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e7 df90
5010 7fb8 e767 0000
13:12:06.085510 52.6.144.18 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b98d 0000 3406 9012
d0cc 8e11 d813 0427 0050 0427 63e7 df90
3cd1 88db 5010 7fe0 7d83 0000 fcd8 9b93
70f5 e657 f8d2 fcd8 5c5c 3d7b 95fe 34bf
3600 c7af
13:12:06.225474 52.6.144.17 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b98e 0000 3406 9011
d0cc 8e11 d813 0427 0050 0427 63e7 e1a8
3cd1 88db 5010 7fe0 f3d7 0000 83d7 7967
e32b f31c 4dc9 b87a ef2c fc65 7e63 85c5
cc7a f72b
13:12:06.225622 216.19.4.39.1063 > 208.204.142.17.www: . ack 5169 win 31624 (DF)
4500 0028 071a 4000 4006 f89d d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e7 e3c0
5010 7b88 e767 0000
13:12:06.565469 52.6.144.16 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b98f 0000 3406 9010
d0cc 8e11 d813 0427 0050 0427 63e7 e3c0
3cd1 88db 5010 7fe0 f7b9 0000 1ceb 2bb1
fbb6 2f9f 0047 ebac abf1 f83f 2b13 7170
f5d6 55f8
13:12:06.705515 52.6.144.15 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b990 0000 3406 900f
d0cc 8e11 d813 0427 0050 0427 63e7 e5d8
3cd1 88db 5010 7fe0 ad5d 0000 c83c aea4
dc1e 62e0 f740 e7a0 ed3b 38c8 7b29 ce73
9155 254d
13:12:06.705773 216.19.4.39.1063 > 208.204.142.17.www: . ack 6241 win 31624 (DF)
4500 0028 071b 4000 4006 f89c d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e7 e7f0
5010 7b88 e337 0000
13:12:06.875519 52.6.144.14 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b991 0000 3406 900e
d0cc 8e11 d813 0427 0050 0427 63e7 e7f0
3cd1 88db 5010 7fe0 ca7a 0000 1096 7db2
4f22 c891 2947 05d9 4ed1 dc6e 6472 3803
4cd7 39ed
13:12:07.245492 216.19.4.39.1063 > 208.204.142.17.www: . ack 6777 win 32696 (DF)
4500 0028 071c 4000 4006 f89b d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e7 ea08
5010 7fb8 dcef 0000
13:12:07.255531 52.6.144.13 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b992 0000 3406 900d
d0cc 8e11 d813 0427 0050 0427 63e7 ea08
3cd1 88db 5010 7fe0 c3c4 0000 6d9d e654
fbe9 e2ce 26a9 a9a3 48a5 ccf8 4e8e 91ac
a488 ca15
13:12:07.755491 216.19.4.39.1063 > 208.204.142.17.www: . ack 7313 win 32696 (DF)
4500 0028 071d 4000 4006 f89a d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e7 ec20
5010 7fb8 dad7 0000
13:12:09.525463 52.6.144.12 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b993 0000 3406 900c
d0cc 8e11 d813 0427 0050 0427 63e7 ec20
3cd1 88db 5010 7fe0 b5ac 0000 c920 636a
3bca 4cb6 a9d7 1dad d251 65d9 fe67 99e5
f251 e651
13:12:09.875523 52.6.81.192 > 208.204.142.17: (frag 17664:-27@1104) [tos 0x3]
ff03 0021 4500 008a b995 4000 3406 51c0
d0cc 8e11 d813 0427 0050 0427 63e7 f050
3cd1 88db 5018 7fe0 d4b6 0000 08b8 2b66
5c5c a83a 9f3c ff00 a425 c591 6460 ea7c
f08f f8c2
13:12:09.875670 216.19.4.39.1063 > 208.204.142.17.www: . ack 7849 win 32160 (DF)
4500 0028 071e 4000 4006 f899 d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e7 ee38
5010 7da0 dad7 0000
13:12:10.235473 52.6.144.9 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b996 0000 3406 9009
d0cc 8e11 d813 0427 0050 0427 63e7 f0b2
3cd1 88db 5010 7fe0 fc6c 0000 c01a 36a4
cf81 e55d 29f9 be8c 4106 8da9 33fb 1fbb
65f9 8617
13:12:10.235594 216.19.4.39.1063 > 208.204.142.17.www: . ack 7849 win 32160 (DF)
4500 0028 071f 4000 4006 f898 d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e7 ee38
5010 7da0 dad7 0000
13:12:10.575494 52.6.144.8 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b997 0000 3406 9008
d0cc 8e11 d813 0427 0050 0427 63e7 f2ca
3cd1 88db 5010 7fe0 cb20 0000 ac43 2ace
2b69 7266 ad58 e5aa cc33 2cbd dd22 dc37
1da8 8b72
13:12:10.575634 216.19.4.39.1063 > 208.204.142.17.www: . ack 7849 win 32160 (DF)
4500 0028 0720 4000 4006 f897 d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e7 ee38
5010 7da0 dad7 0000
13:12:11.505501 52.6.144.7 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b998 0000 3406 9007
d0cc 8e11 d813 0427 0050 0427 63e7 f4e2
3cd1 88db 5010 7fe0 cd5e 0000 a2cd f31a
4a0c a9e9 a454 6486 49a4 8647 9360 70ad
b0b5 c024
13:12:11.506008 216.19.4.39.1063 > 208.204.142.17.www: . ack 7849 win 32160 (DF)
4500 0028 0721 4000 4006 f896 d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e7 ee38
5010 7da0 dad7 0000
13:12:11.675480 52.6.144.6 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b999 0000 3406 9006
d0cc 8e11 d813 0427 0050 0427 63e7 f6fa
3cd1 88db 5010 7fe0 b2f5 0000 c6b4 eea9
cef3 6a6a ba9a f126 451d 246b 5128 6cc5
6b18 4170
13:12:11.675633 216.19.4.39.1063 > 208.204.142.17.www: . ack 7849 win 32160 (DF)
4500 0028 0722 4000 4006 f895 d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e7 ee38
5010 7da0 dad7 0000
13:12:11.825499 52.6.144.5 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b99a 0000 3406 9005
d0cc 8e11 d813 0427 0050 0427 63e7 f912
3cd1 88db 5010 7fe0 daec 0000 8820 c7db
46a0 fc7a 5fc9 1866 3335 3aa3 3d23 9e61
2fcc 3137
13:12:11.828444 216.19.4.39.1063 > 208.204.142.17.www: . ack 7849 win 32160 (DF)
4500 0028 0723 4000 4006 f894 d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e7 ee38
5010 7da0 dad7 0000
13:12:12.305514 52.6.144.4 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b99b 0000 3406 9004
d0cc 8e11 d813 0427 0050 0427 63e7 fb2a
3cd1 88db 5010 7fe0 6bbc 0000 8933 8d5d
2e6b da26 7141 050d 4a3d 0d2d 2653 4d32
f064 6201
13:12:12.305652 216.19.4.39.1063 > 208.204.142.17.www: . ack 7849 win 32160 (DF)
4500 0028 0724 4000 4006 f893 d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e7 ee38
5010 7da0 dad7 0000
13:12:12.925502 52.6.144.3 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b99c 0000 3406 9003
d0cc 8e11 d813 0427 0050 0427 63e7 fd42
3cd1 88db 5010 7fe0 f7e8 0000 b37f 7b42
cf2b d59d 9c52 d5d0 e4e7 5257 53e4 9431
8856 5aa0
13:12:12.925635 216.19.4.39.1063 > 208.204.142.17.www: . ack 7849 win 32160 (DF)
4500 0028 0725 4000 4006 f892 d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e7 ee38
5010 7da0 dad7 0000
13:12:13.095468 52.6.144.2 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b99d 0000 3406 9002
d0cc 8e11 d813 0427 0050 0427 63e7 ec20
3cd1 88db 5010 7fe0 b5ac 0000 c920 636a
3bca 4cb6 a9d7 1dad d251 65d9 fe67 99e5
f251 e651
13:12:13.095575 216.19.4.39.1063 > 208.204.142.17.www: . ack 7849 win 32160 (DF)
4500 0028 0726 4000 4006 f891 d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e7 ee38
5010 7da0 dad7 0000
13:12:13.245499 52.6.144.1 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b99e 0000 3406 9001
d0cc 8e11 d813 0427 0050 0427 63e7 ee38
3cd1 88db 5010 7fe0 0376 0000 d554 39ac
d696 4489 0da3 0854 f124 4536 4702 e4df
9588 1a1d
13:12:13.245650 216.19.4.39.1063 > 208.204.142.17.www: . ack 12235 win 27774 (DF)
4500 0028 0727 4000 4006 f890 d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e7 ff5a
5010 6c7e dad7 0000
13:12:13.285497 52.6.81.182 > 208.204.142.17: (frag 17664:-27@1104) [tos 0x3]
ff03 0021 4500 008a b99f 4000 3406 51b6
d0cc 8e11 d813 0427 0050 0427 63e7 f050
3cd1 88db 5018 7fe0 d4b6 0000 08b8 2b66
5c5c a83a 9f3c ff00 a425 c591 6460 ea7c
f08f f8c2
13:12:13.285592 216.19.4.39.1063 > 208.204.142.17.www: . ack 12235 win 31624 (DF)
4500 0028 0728 4000 4006 f88f d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e7 ff5a
5010 7b88 cbcd 0000
13:12:13.745485 52.6.143.255 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b9a0 0000 3406 8fff
d0cc 8e11 d813 0427 0050 0427 63e7 ff5a
3cd1 88db 5010 7fe0 327b 0000 0a78 df6b
2f11 8c8f 24ae db5d 945e 4daa 0901 4600
dceb 7d16
13:12:13.915486 52.6.143.254 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b9a1 0000 3406 8ffe
d0cc 8e11 d813 0427 0050 0427 63e8 0172
3cd1 88db 5010 7fe0 bbab 0000 1499 e657
94e5 d487 7d4c c639 a5a9 a999 bdb9 6461
10dc 7ad8
13:12:13.916755 216.19.4.39.1063 > 208.204.142.17.www: . ack 13307 win 31624 (DF)
4500 0028 0729 4000 4006 f88e d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e8 038a
5010 7b88 c79d 0000
13:12:16.125463 52.6.143.253 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b9a2 0000 3406 8ffd
d0cc 8e11 d813 0427 0050 0427 63e8 038a
3cd1 88db 5010 7fe0 69ed 0000 751b ea5d
a350 dc3b 301d c652 4741 b6c4 d878 1e3c
3f27 c30b
13:12:16.625484 216.19.4.39.1063 > 208.204.142.17.www: . ack 13843 win 32696 (DF)
4500 0028 072a 4000 4006 f88d d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e8 05a2
5010 7fb8 c155 0000
13:12:36.375492 52.6.143.251 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b9a4 0000 3406 8ffb
d0cc 8e11 d813 0427 0050 0427 63e7 ff5a
3cd1 88db 5010 7fe0 327b 0000 0a78 df6b
2f11 8c8f 24ae db5d 945e 4daa 0901 4600
dceb 7d16
13:12:36.375604 216.19.4.39.1063 > 208.204.142.17.www: . ack 13843 win 32696 (DF)
4500 0028 072b 4000 4006 f88c d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e8 05a2
5010 7fb8 c155 0000
13:12:39.005508 52.6.143.250 > 208.204.142.17: (frag 17664:-27@4608) [tos 0x3]
ff03 0021 4500 0240 b9a5 0000 3406 8ffa
d0cc 8e11 d813 0427 0050 0427 63e8 05a2
3cd1 88db 5010 7fe0 0c8a 0000 3c14 d2c7
78f9 9545 dd23 10a1 98b7 78bf 56b5 b71c
48c8 ccfd
13:12:39.505489 216.19.4.39.1063 > 208.204.142.17.www: . ack 14379 win 32696 (DF)
4500 0028 072c 4000 4006 f88b d813 0427
d0cc 8e11 0427 0050 3cd1 88db 63e8 07ba
5010 7fb8 bf3d 0000
4844 6adc 0b48 aa14 4c08 b6d2 79bd dcee
3245 b339

Chris Noe
(stiker@northlink.com)

---------------------------------------------------------
#!/bin/perl -sp0777i<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<j]dsj
$/=unpack('H*',$_);$_=`echo 16dio\U$k"SK$/SM$n\EsN0p[lN*1
lK[d2%Sa2/d0$^Ixp"|dc`;s/\W//g;$_=pack('H*',/((..)*)$/)
---- http://online.offshore.com.ai/arms-trafficker/ -----

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.altern.org/andrebalsa/doc/lkml-faq.html