--- Tom Eastep <[EMAIL PROTECTED]> wrote:

> > If you want me to look at the output of tcpdump,
> please use the "-n" option.

tcpdump on eth1 on the gateway (remote tried to
connect twice):

13:18:57.029836 IP 194.179.55.135.49114 >
10.215.144.7.25: S 3140736196:3140736196(0) win 24820
<nop,wscale 0,nop,nop,sackOK,mss 1452>
13:18:57.030181 IP 10.215.144.7.25 >
194.179.55.135.49114: S 4284445628:4284445628(0) ack
3140736197 win 32767 <mss
1460,nop,nop,sackOK,nop,wscale 14>
13:19:01.430928 IP 10.215.144.7.25 >
194.179.55.135.49114: S 4284445628:4284445628(0) ack
3140736197 win 32767 <mss
1460,nop,nop,sackOK,nop,wscale 14>
13:19:07.432794 IP 10.215.144.7.25 >
194.179.55.135.49114: S 4284445628:4284445628(0) ack
3140736197 win 32767 <mss
1460,nop,nop,sackOK,nop,wscale 14>
13:19:19.437405 IP 10.215.144.7.25 >
194.179.55.135.49114: S 4284445628:4284445628(0) ack
3140736197 win 32767 <mss
1460,nop,nop,sackOK,nop,wscale 14>
13:19:43.440156 IP 10.215.144.7.25 >
194.179.55.135.49114: S 4284445628:4284445628(0) ack
3140736197 win 32767 <mss
1460,nop,nop,sackOK,nop,wscale 14>
13:19:52.789009 IP 194.179.55.129.39005 >
10.215.144.7.25: S 1836765456:1836765456(0) win 24820
<nop,wscale 0,nop,nop,sackOK,mss 1452>
13:19:52.789345 IP 10.215.144.7.25 >
194.179.55.129.39005: S 45091514:45091514(0) ack
1836765457 win 32767 <mss
1460,nop,nop,sackOK,nop,wscale 14>
13:19:56.246909 IP 10.215.144.7.25 >
194.179.55.129.39005: S 45091514:45091514(0) ack
1836765457 win 32767 <mss
1460,nop,nop,sackOK,nop,wscale 14>
13:20:02.246117 IP 10.215.144.7.25 >
194.179.55.129.39005: S 45091514:45091514(0) ack
1836765457 win 32767 <mss
1460,nop,nop,sackOK,nop,wscale 14>

tcpdump on eth0 on the bridge:

13:13:45.253046 IP 194.179.55.135.49114 >
10.215.144.7.25: S 3140736196:3140736196(0) win 24820
<nop,wscale 0,nop,nop,sackOK,mss 1452>
13:13:45.253265 IP 10.215.144.7.25 >
194.179.55.135.49114: S 4284445628:4284445628(0) ack
3140736197 win 32767 <mss
1460,nop,nop,sackOK,nop,wscale 14>
13:13:49.653649 IP 10.215.144.7.25 >
194.179.55.135.49114: S 4284445628:4284445628(0) ack
3140736197 win 32767 <mss
1460,nop,nop,sackOK,nop,wscale 14>
13:13:55.655017 IP 10.215.144.7.25 >
194.179.55.135.49114: S 4284445628:4284445628(0) ack
3140736197 win 32767 <mss
1460,nop,nop,sackOK,nop,wscale 14>
13:14:07.658590 IP 10.215.144.7.25 >
194.179.55.135.49114: S 4284445628:4284445628(0) ack
3140736197 win 32767 <mss
1460,nop,nop,sackOK,nop,wscale 14>
13:14:31.659389 IP 10.215.144.7.25 >
194.179.55.135.49114: S 4284445628:4284445628(0) ack
3140736197 win 32767 <mss
1460,nop,nop,sackOK,nop,wscale 14>
13:14:41.007658 IP 194.179.55.129.39005 >
10.215.144.7.25: S 1836765456:1836765456(0) win 24820
<nop,wscale 0,nop,nop,sackOK,mss 1452>
13:14:41.007803 IP 10.215.144.7.25 >
194.179.55.129.39005: S 45091514:45091514(0) ack
1836765457 win 32767 <mss
1460,nop,nop,sackOK,nop,wscale 14>
13:14:44.465082 IP 10.215.144.7.25 >
194.179.55.129.39005: S 45091514:45091514(0) ack
1836765457 win 32767 <mss
1460,nop,nop,sackOK,nop,wscale 14>
13:14:50.463779 IP 10.215.144.7.25 >
194.179.55.129.39005: S 45091514:45091514(0) ack
1836765457 win 32767 <mss
1460,nop,nop,sackOK,nop,wscale 14>
13:15:02.466701 IP 10.215.144.7.25 >
194.179.55.129.39005: S 45091514:45091514(0) ack
1836765457 win 32767 <mss
1460,nop,nop,sackOK,nop,wscale 14>

Please disregard the time stamps as the two systems'
clocks are skewed.
 
Updated shorewall dumps for both systems
(gateway and bridge):

http://213.96.91.201/shorewall/

Thank you for your time.



       
____________________________________________________________________________________
Choose the right car based on your needs.  Check out Yahoo! Autos new Car 
Finder tool.
http://autos.yahoo.com/carfinder/

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to