Tu as la MAC source ? 

> Le 15 juin 2017 à 13:31, Arnaud Turpin <atur...@netiwan.fr> a écrit :
> 
> Bonjour
> 
> Nous avons un comportement bizarre sur le GIX Equinix PA2.
> On reçoit du traffic 20/30 Mbps qui ne nous concerne pas, vous avez aussi le 
> même problème ?
> 
> 
> Date first seen          Duration Proto      Src IP Addr:Port          Dst IP 
> Addr:Port   Packets    Bytes Flows
> 2017-06-15 13:12:45.396   106.772 TCP      193.55.120.26:80    ->   
> 146.255.174.94:54206   531500   27.8 M     1
> 2017-06-15 13:14:21.116     0.000 UDP     172.217.19.229:443   ->  
> 146.255.170.154:64428      100     6200     1
> 2017-06-15 13:14:21.314     0.000 TCP      193.109.81.33:3101  ->   
> 156.133.50.177:56905      100     4000     1
> 2017-06-15 13:14:21.388     0.000 TCP     195.42.145.141:179   ->   
> 195.42.144.104:8163       100     4000     1
> 2017-06-15 13:12:41.265   107.036 TCP        37.59.11.22:56097 ->  
> 146.255.174.146:61774    29100    1.2 M     1
> 2017-06-15 13:14:21.570     0.000 TCP      66.249.93.222:44218 ->   
> 146.255.171.73:80         100     5200     1
> 2017-06-15 13:14:21.611     0.000 TCP     173.194.76.154:443   ->     
> 46.21.116.98:60648      100     5200     1
> 2017-06-15 13:14:21.673     0.000 UDP      193.93.124.21:161   ->   
> 194.117.246.80:42671      100    26700     1
> 2017-06-15 13:14:19.371     2.385 TCP     176.142.138.17:54706 ->   
> 146.255.171.81:443        200    11600     1
> 2017-06-15 13:14:21.886     0.000 TCP      80.214.79.207:12212 ->  
> 146.255.171.160:80         100     4000     1
> 2017-06-15 13:14:22.084     0.000 TCP     77.154.204.154:23207 ->    
> 212.63.232.97:443        100     4000     1
> 2017-06-15 13:14:22.545     0.000 TCP      80.214.79.207:12211 ->  
> 146.255.171.160:80         100     4000     1
> 2017-06-15 13:14:22.964     0.000 TCP     80.248.212.200:8786  ->      
> 81.92.116.8:80         100   150000     1
> 2017-06-15 13:14:23.074     0.000 TCP      81.244.211.43:3912  ->    
> 81.92.115.138:80         100     4000     1
> 2017-06-15 13:14:17.984    10.915 UDP     172.217.19.227:443   ->  
> 146.255.175.209:57874     1000   949600     1
> 2017-06-15 13:14:23.445     0.000 TCP        5.49.206.58:53642 ->    
> 81.92.115.206:80         100     5200     1
> 2017-06-15 13:14:23.665     0.000 TCP     91.197.232.109:39200 ->  
> 194.117.247.183:22         100     6000     1
> 2017-06-15 13:14:23.668     0.000 TCP     91.197.232.109:59423 ->  
> 194.117.247.185:22         100     6000     1
> 2017-06-15 13:14:23.864     0.000 TCP     216.58.213.131:443   ->    
> 85.115.60.201:44881      100   147000     1
> 2017-06-15 13:14:23.974     0.000 TCP       89.91.30.153:56036 ->  
> 146.255.170.114:62112      100     5200     1
> 2017-06-15 13:14:23.977     0.000 TCP     188.125.80.144:443   ->   
> 146.255.174.70:62812      100    15700     1
> 2017-06-15 13:14:24.071     0.000 TCP      195.42.144.98:179   ->   
> 195.42.145.141:55921      100     6700     1
> 2017-06-15 13:14:24.526     0.089 TCP       178.33.22.97:443   ->  
> 146.255.175.135:58371      200   298000     1
> 2017-06-15 13:14:24.704     0.000 TCP       89.91.82.228:60085 ->    
> 217.70.184.11:143        100   146000     1
> 2017-06-15 13:14:24.919     0.000 TCP     216.58.201.234:80    ->     
> 46.21.116.98:60743      100    19900     1
> 2017-06-15 13:14:25.147     0.000 TCP     37.187.132.217:443   ->   
> 146.255.174.70:17833      100   142000     1
> 2017-06-15 13:14:25.166     0.000 TCP     176.163.36.227:50635 ->   
> 193.25.198.218:80         100    35900     1
> 2017-06-15 13:14:25.334     0.000 TCP    176.151.239.150:53321 ->   
> 217.70.180.135:80         100     5200     1
> 2017-06-15 13:14:25.774     0.000 TCP      54.192.77.157:443   ->     
> 185.11.160.0:4481       100   148000     1
> 2017-06-15 13:10:17.636   291.876 TCP       178.33.71.43:1935  ->  
> 146.255.174.104:41246     5500   902900     1
> 2017-06-15 13:14:26.027    23.615 TCP      80.215.11.111:42514 ->    
> 213.215.28.11:993       2200   154500     1
> 2017-06-15 13:14:26.180    14.501 TCP      80.169.233.26:443   ->     
> 185.3.44.201:20910      200   103600     1
> 2017-06-15 13:14:26.290     0.000 UDP      176.155.54.49:61117 ->  
> 146.255.170.154:49484      100     3800     1
> 
> 
> +
> Arnaud
> 
> ---------------------------
> Liste de diffusion du FRnOG
> http://www.frnog.org/


---------------------------
Liste de diffusion du FRnOG
http://www.frnog.org/

Répondre à