> 192.168.1.2  локальная машина
> 91.144.134.30 внешний IP сервера
> 
> IP 91.144.134.30.41113 > 93.158.134.8.http: S 3177273342:3177273342(0) win 
> 5240 <mss 
> 40,nop,nop,sackOK,nop,wscale 7>
> IP 93.158.134.8.http > 192.168.1.2.41113: S 1970114950:1970114950(0) ack 
> 3177273343 win 8192 <mss 
> 216,nop,wscale 3,sackOK,eol>
1. От чего такое малый MSS (40)? Вроде д.б. что-то около 1424 для PPPoE...
2. Откуда взялся "серый" IP получателя на внешнем интерфейсе?

> 00:17:34.644611 IP 192.168.1.2.41113 > 93.158.134.8.http: R 
> 3177273439:3177273439(0) win 0
> 00:17:37.604735 IP 91.144.134.30.41113 > 93.158.134.8.http: . 0:48(48) ack 1 
> win 41
Вообще все смешалось - и "белый" и "серый", каждый шлет что-то свое... У вас 
прокси
прозрачный?

> 00:17:37.643433 IP 93.158.134.8.http > 192.168.1.2.41113: . ack 97 win 1014
> 00:17:37.643567 IP 192.168.1.2.41113 > 93.158.134.8.http: R 
> 3177273439:3177273439(0) win 0
> 00:17:43.606482 IP 91.144.134.30.41113 > 93.158.134.8.http: . 0:48(48) ack 1 
> win 41
> 00:17:43.645402 IP 93.158.134.8.http > 192.168.1.2.41113: . ack 97 win 1014
> 00:17:43.645548 IP 192.168.1.2.41113 > 93.158.134.8.http: R 
> 3177273439:3177273439(0) win 0
> 00:17:55.608012 IP 91.144.134.30.41113 > 93.158.134.8.http: . 0:48(48) ack 1 
> win 41
> 00:17:55.647201 IP 93.158.134.8.http > 192.168.1.2.41113: . ack 97 win 1014
> 00:17:55.647335 IP 192.168.1.2.41113 > 93.158.134.8.http: R 
> 3177273439:3177273439(0) win 0
> 00:18:19.603062 IP 91.144.134.30.41113 > 93.158.134.8.http: . 0:48(48) ack 1 
> win 41
> 00:18:19.642490 IP 93.158.134.8.http > 192.168.1.2.41113: . ack 97 win 1014
> 00:18:19.642616 IP 192.168.1.2.41113 > 93.158.134.8.http: R 
> 3177273439:3177273439(0) win 0
Ересь какая-то...


-- 
Best regards, Pavel
mail/xmpp: p2n-at-ya-dot-ru

_______________________________________________
Sysadmins mailing list
[email protected]
https://lists.altlinux.org/mailman/listinfo/sysadmins

Ответить