Inca ceva: 206.191.0.140 este ns-ul meu. La mine am un named care e si master pe zonele mele, si resolver pentru aplicatiile mele locale de pe serverul respectiv (care e doar un server, nu are nici un alt client in spate).
# tcpdump -n host 206.191.0.140 tcpdump: listening on eth0 10:02:29.882564 x.y.z.t.52509 > 206.191.0.140.domain: 36739+ PTR? 102.114.122.213.in-addr.arpa. (46) 10:02:29.885193 206.191.0.140.domain > x.y.z.t.52509: 36739 1/2/0 (147) (DF) 10:02:30.046183 x.y.z.t.52509 > 206.191.0.140.domain: 27272+ PTR? 171.163.215.12.in-addr.arpa. (45) 10:02:30.106091 206.191.0.140.domain > x.y.z.t.52509: 27272 1/4/4 (237) (DF) 10:02:30.106949 x.y.z.t.52509 > 206.191.0.140.domain: 27273+ A? 12-215-163-171.client.mchsi.com. (49) 10:02:30.157803 206.191.0.140.domain > x.y.z.t.52509: 27273 1/4/4 (212) (DF) 10:02:30.386815 x.y.z.t.52509 > 206.191.0.140.domain: 27272+ PTR? 35.129.72.200.in-addr.arpa. (44) 10:02:30.391131 206.191.0.140.domain > x.y.z.t.52509: 27272 NXDomain 0/1/0 (111) (DF) 10:02:30.486447 x.y.z.t.52493 > 206.191.0.140.domain: 36742+ PTR? 130.225.239.210.in-addr.arpa. (46) 10:02:30.489059 206.191.0.140.domain > x.y.z.t.52493: 36742 1/4/0 (165) (DF) 10:02:30.489113 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 52493 unreachable [tos 0xc0] 10:02:30.491694 x.y.z.t.52509 > 206.191.0.140.domain: 27278+ ANY? phamerd.com.mydomain.com. (37) 10:02:30.493055 206.191.0.140.domain > x.y.z.t.52509: 27278 NXDomain 0/1/0 (81) (DF) 10:02:30.542486 x.y.z.t.52509 > 206.191.0.140.domain: 36738+ PTR? 55.0.70.67.in-addr.arpa. (41) 10:02:30.544517 206.191.0.140.domain > x.y.z.t.52509: 36738 1/2/2 PTR[|domain] (DF) 10:02:30.555763 206.191.0.140.domain > x.y.z.t.52507: 36736 1/2/2 (147) (DF) 10:02:30.556277 x.y.z.t.52509 > 206.191.0.140.domain: 27274+ ANY? 88cresa.com. (29) 10:02:30.770443 x.y.z.t.52510 > 206.191.0.140.domain: 27274+ ANY? 67ty6.com. (27) 10:02:30.775096 206.191.0.140.domain > x.y.z.t.52510: 27274 4/2/0 MX[|domain] (DF) 10:02:30.860355 x.y.z.t.52510 > 206.191.0.140.domain: 36735+ PTR? 117.155.2.67.in-addr.arpa. (43) 10:02:30.863030 206.191.0.140.domain > x.y.z.t.52510: 36735 1/2/0 (167) (DF) 10:02:31.067147 x.y.z.t.52510 > 206.191.0.140.domain: 27275+ ANY? mydomain.com. (25) 10:02:31.070877 206.191.0.140.domain > x.y.z.t.52510: 27275 7/2/3 SOA[|domain] (DF) 10:02:31.106691 x.y.z.t.52510 > 206.191.0.140.domain: 36737+ PTR? 173.15.118.163.in-addr.arpa. (45) 10:02:31.111347 206.191.0.140.domain > x.y.z.t.52510: 36737 1/2/2 (147) (DF) 10:02:31.176817 x.y.z.t.52510 > 206.191.0.140.domain: 36762+ PTR? 37.31.240.81.in-addr.arpa. (43) 10:02:31.182795 206.191.0.140.domain > x.y.z.t.52510: 36762 1/5/0 (181) (DF) 10:02:31.430247 x.y.z.t.52510 > 206.191.0.140.domain: 36763+ PTR? 37.31.240.81.in-addr.arpa. (43) 10:02:31.435364 206.191.0.140.domain > x.y.z.t.52510: 36763 1/5/0 (181) (DF) 10:02:31.455796 x.y.z.t.52510 > 206.191.0.140.domain: 36740+ PTR? 1.50.85.192.in-addr.arpa. (42) 10:02:31.461837 206.191.0.140.domain > x.y.z.t.52510: 36740 1/3/1 PTR[|domain] (DF) 10:02:31.590997 x.y.z.t.52510 > 206.191.0.140.domain: 36737+ PTR? 130.75.79.62.in-addr.arpa. (43) 10:02:31.595744 206.191.0.140.domain > x.y.z.t.52510: 36737 NXDomain 0/1/0 (110) (DF) 10:02:31.655227 x.y.z.t.52510 > 206.191.0.140.domain: 36748+ PTR? 50.88.242.64.in-addr.arpa. (43) 10:02:31.658192 206.191.0.140.domain > x.y.z.t.52510: 36748 NXDomain 0/1/0 (97) (DF) 10:02:31.865460 x.y.z.t.52510 > 206.191.0.140.domain: 36740+ PTR? 125.172.72.67.in-addr.arpa. (44) 10:02:31.881208 x.y.z.t.52511 > 206.191.0.140.domain: 36741+ PTR? 71.6.109.153.in-addr.arpa. (43) 10:02:31.883032 206.191.0.140.domain > x.y.z.t.52511: 36741 NXDomain 0/1/0 (97) (DF) 10:02:31.898924 x.y.z.t.52511 > 206.191.0.140.domain: 27277+ MX? phamerd.com. (29) 10:02:31.901514 206.191.0.140.domain > x.y.z.t.52510: 36740 1/2/2 (175) (DF) 10:02:32.054783 x.y.z.t.52512 > 206.191.0.140.domain: 27273+ ANY? luso.pt. (25) 10:02:32.057088 206.191.0.140.domain > x.y.z.t.52512: 27273 6/4/0 A 216.40.201.216, A[|domain] (DF) 10:02:32.381400 x.y.z.t.52512 > 206.191.0.140.domain: 27276+ A? phamerd.com. (29) 10:02:32.868737 x.y.z.t.52513 > 206.191.0.140.domain: 27278+ ANY? cared45.com.mydomain.com. (37) 10:02:32.873051 206.191.0.140.domain > x.y.z.t.52513: 27278 NXDomain 0/1/0 (81) (DF) 10:02:33.076843 x.y.z.t.52513 > 206.191.0.140.domain: 36739+ PTR? 25.182.139.169.in-addr.arpa. (45) 10:02:33.082151 206.191.0.140.domain > x.y.z.t.52513: 36739 NXDomain 0/1/0 (104) (DF) 10:02:33.100847 x.y.z.t.52513 > 206.191.0.140.domain: 36747+ PTR? 46.3.215.62.in-addr.arpa. (42) 10:02:33.103493 206.191.0.140.domain > x.y.z.t.52513: 36747 NXDomain 0/1/0 (100) (DF) 10:02:33.193295 x.y.z.t.52513 > 206.191.0.140.domain: 36741+ PTR? 200.4.78.144.in-addr.arpa. (43) 10:02:33.195668 206.191.0.140.domain > x.y.z.t.52513: 36741 NXDomain 0/1/0 (100) (DF) 10:02:33.251286 x.y.z.t.52513 > 206.191.0.140.domain: 36740+ PTR? 25.182.139.169.in-addr.arpa. (45) 10:02:33.254475 206.191.0.140.domain > x.y.z.t.52513: 36740 NXDomain 0/1/0 (104) (DF) 10:02:33.564839 x.y.z.t.52513 > 206.191.0.140.domain: 36744+ PTR? 194.173.83.194.in-addr.arpa. (45) 10:02:33.569595 206.191.0.140.domain > x.y.z.t.52513: 36744 NXDomain 0/1/0 (102) (DF) 10:02:33.633707 x.y.z.t.52513 > 206.191.0.140.domain: 27274+ ANY? mydomain.com. (25) 10:02:33.636115 206.191.0.140.domain > x.y.z.t.52513: 27274 7/2/3 SOA[|domain] (DF) Mersi On Tue, 16 Mar 2004, Mihai RUSU wrote: > Salut > > Raspunsul cu udp port unreachable cel mai probabil este de la kernel > (stiva TCP/IP) si nu generat de un proces. deci, la UDP, daca primest un > packet UDP pe un port pe care nu asculta nici un proces, stiva TCP/IP va > raspunde cu ICMP port unreachable. > > Ca sa confirmi teoria mea, fa tcpdump -n host 206.191.0.140 > (eventual "and udp") > > On Tue, 16 Mar 2004, Radu Filip wrote: > > > > > salut, cum pot afla cine (ce proces) genereaza traficul icmp de mai jos? > > mersi,radu > > > > # tcpdump -nn 'icmp' > > 09:30:35.292778 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48481 unreachable > > [tos 0xc0] > > 09:30:35.292799 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48490 unreachable > > [tos 0xc0] > > 09:30:35.293218 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48496 unreachable > > [tos 0xc0] > > 09:30:35.293890 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48501 unreachable > > [tos 0xc0] > > 09:30:37.578780 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48507 unreachable > > [tos 0xc0] > > 09:30:37.578806 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48514 unreachable > > [tos 0xc0] > > 09:30:37.578823 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48533 unreachable > > [tos 0xc0] > > 09:30:37.579191 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48533 unreachable > > [tos 0xc0] > > 09:30:38.935208 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48446 unreachable > > [tos 0xc0] > > 09:30:40.048350 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48447 unreachable > > [tos 0xc0] > > 09:30:50.388731 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48458 unreachable > > [tos 0xc0] > > 09:30:50.389193 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48458 unreachable > > [tos 0xc0] > > 09:30:55.396141 x.y.z.t > 206.191.0.210: icmp: x.y.z.t udp port 48463 unreachable > > [tos 0xc0] > > 09:30:55.396163 x.y.z.t > 206.191.0.210: icmp: x.y.z.t udp port 48463 unreachable > > [tos 0xc0] > > 09:30:57.974996 x.y.z.t > 82.50.56.112: icmp: x.y.z.t udp port 137 unreachable > > [tos 0xc0] > > 09:30:58.977871 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48467 unreachable > > [tos 0xc0] > > 09:30:58.978150 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48478 unreachable > > [tos 0xc0] > > 09:30:58.978176 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48489 unreachable > > [tos 0xc0] > > 09:30:58.978430 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48495 unreachable > > [tos 0xc0] > > 09:30:59.474654 x.y.z.t > 82.50.56.112: icmp: x.y.z.t udp port 137 unreachable > > [tos 0xc0] > > 09:31:00.970924 x.y.z.t > 82.50.56.112: icmp: x.y.z.t udp port 137 unreachable > > [tos 0xc0] > > 09:31:03.069171 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48477 unreachable > > [tos 0xc0] > > 09:31:03.069355 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48488 unreachable > > [tos 0xc0] > > 09:31:03.069577 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48494 unreachable > > [tos 0xc0] > > 09:31:03.069805 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48499 unreachable > > [tos 0xc0] > > 09:31:10.537810 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48491 unreachable > > [tos 0xc0] > > 09:31:10.538011 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48497 unreachable > > [tos 0xc0] > > 09:31:10.538208 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48502 unreachable > > [tos 0xc0] > > 09:31:10.538408 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48508 unreachable > > [tos 0xc0] > > 09:31:19.018355 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48500 unreachable > > [tos 0xc0] > > 09:31:19.018572 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48506 unreachable > > [tos 0xc0] > > 09:31:19.018863 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48510 unreachable > > [tos 0xc0] > > 09:31:19.018879 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48530 unreachable > > [tos 0xc0] > > 09:31:28.216327 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48561 unreachable > > [tos 0xc0] > > 09:31:28.216572 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48561 unreachable > > [tos 0xc0] > > 09:31:28.217071 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48586 unreachable > > [tos 0xc0] > > 09:31:28.217324 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48600 unreachable > > [tos 0xc0] > > 09:31:29.625291 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48636 unreachable > > [tos 0xc0] > > 09:31:29.625530 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48643 unreachable > > [tos 0xc0] > > 09:31:33.642460 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48655 unreachable > > [tos 0xc0] > > 09:31:37.284275 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48542 unreachable > > [tos 0xc0] > > 09:31:37.284296 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48569 unreachable > > [tos 0xc0] > > 09:31:37.284311 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48574 unreachable > > [tos 0xc0] > > 09:31:38.963885 69.31.11.17 > x.y.z.t: icmp: echo request (DF) > > 09:31:44.030473 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48570 unreachable > > [tos 0xc0] > > 09:31:44.030654 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48570 unreachable > > [tos 0xc0] > > 09:31:44.030858 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48570 unreachable > > [tos 0xc0] > > 09:31:44.031056 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48570 unreachable > > [tos 0xc0] > > 09:31:47.278833 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48648 unreachable > > [tos 0xc0] > > 09:31:47.279146 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48653 unreachable > > [tos 0xc0] > > 09:31:47.279311 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48660 unreachable > > [tos 0xc0] > > 09:31:47.279470 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48672 unreachable > > [tos 0xc0] > > 09:31:48.971108 x.y.z.t > 206.191.0.210: icmp: x.y.z.t udp port 48575 unreachable > > [tos 0xc0] > > 09:31:48.971603 x.y.z.t > 206.191.0.210: icmp: x.y.z.t udp port 48575 unreachable > > [tos 0xc0] > > 09:31:48.971618 x.y.z.t > 206.191.0.210: icmp: x.y.z.t udp port 48575 unreachable > > [tos 0xc0] > > 09:31:48.972097 x.y.z.t > 206.191.0.210: icmp: x.y.z.t udp port 48575 unreachable > > [tos 0xc0] > > 09:31:53.392836 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48583 unreachable > > [tos 0xc0] > > 09:31:53.392855 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48597 unreachable > > [tos 0xc0] > > 09:31:53.393317 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48606 unreachable > > [tos 0xc0] > > 09:31:53.393809 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48612 unreachable > > [tos 0xc0] > > > > > > --- > > Detalii despre listele noastre de mail: http://www.lug.ro/ > > > > > > --- Detalii despre listele noastre de mail: http://www.lug.ro/
