Hi again,
ipnat -l shows the following:
RDR 127.0.0.1 1723 <- -> 194.126.106.106 1723 [194.126.106.110 1814] proxy pptp/6 use 2 flags 0 proto 6 flags 0 bytes 868 pkts 8 data YES size 316
I think I should also see some 'proto 47' entries listed here?
Yes. Try running ipmon as "ipmon -a". I suspect it just disappears quicker than the state entry.
'ipmon -a' shows the following:
03/02/2005 17:37:03.436762 dc0 @0:11 p 194.126.106.110,4422 -> 127.0.0.1,1723 PR tcp len 20 48 -S K-S IN NAT 03/02/2005 17:37:03.460687 dc0 @0:8 b 127.0.0.1 -> 194.126.106.110 PR gre len 20 (74) OUT 03/02/2005 17:37:03.475398 dc0 @0:19 b 194.126.106.110 -> 127.0.0.1 PR gre len 20 (57) IN NAT 03/02/2005 17:37:03.436493 @0 NAT:MAP 127.0.0.1,0 <- -> 194.126.106.106,0 [194.126.106.110,0] 03/02/2005 17:37:03.436594 @12 NAT:RDR 127.0.0.1,1723 <- -> 194.126.106.106,1723 [194.126.106.110,4422] 03/02/2005 17:37:03.436568 STATE:NEW 194.126.106.110 -> 194.126.106.106 PR gre 03/02/2005 17:37:03.436742 STATE:NEW 194.126.106.110,4422 -> 127.0.0.1,1723 PR tcp 03/02/2005 17:37:05.468596 dc0 @0:8 b 127.0.0.1 -> 194.126.106.110 PR gre len 20 (74) OUT 03/02/2005 17:37:05.478371 dc0 @0:19 b 194.126.106.110 -> 127.0.0.1 PR gre len 20 (57) IN NAT 03/02/2005 17:37:08.486210 dc0 @0:19 b 194.126.106.110 -> 127.0.0.1 PR gre len 20 (57) IN NAT 03/02/2005 17:37:11.743619 @0 NAT:EXPIRE 127.0.0.1,0 <- -> 194.126.106.106,0 [194.126.106.110,0] Pkts 3/0 Bytes 171/0 03/02/2005 17:37:12.486228 dc0 @0:19 b 194.126.106.110 -> 194.126.106.106 PR gre len 20 (57) IN 03/02/2005 17:37:16.486196 dc0 @0:19 b 194.126.106.110 -> 194.126.106.106 PR gre len 20 (57) IN 03/02/2005 17:37:20.487659 dc0 @0:19 b 194.126.106.110 -> 194.126.106.106 PR gre len 20 (57) IN 03/02/2005 17:37:23.563925 @0 NAT:MAP 127.0.0.1,0 <- -> 194.126.106.106,0 [194.126.106.110,0]
-- Toomas Aas -------------------------------------------------------- |arvutiv�rgu peaspetsialist | head specialist on computer networks| |Tartu Linnakantselei | Tartu City Office | ----------------------------------------------------- +372 736 1274
