Исправление daemonpnz, (текущая версия) :
tcpdump на компе роутере при открытии 3dnews и lor с ПК
R2-D2 ~ # tcpdump -vvi eth1 -c 10 ip host 3dnews.ru
error : ret -1
tcpdump: listening on eth1, link-type EN10MB (Ethernet), capture size 65535 bytes
18:04:26.015889 IP (tos 0x0, ttl 64, id 12418, offset 0, flags [DF], proto TCP (6), length 828)
192.168.1.2.54918 > ceta.3dnews.ru.http: Flags [P.], cksum 0xf658 (correct), seq 4109506130:4109506906, ack 3427706210, win 123, options [nop,nop,TS val 580403884 ecr 216456435], length 776
18:04:26.068115 IP (tos 0x68, ttl 58, id 32628, offset 0, flags [DF], proto TCP (6), length 1492)
ceta.3dnews.ru.http > 192.168.1.2.54918: Flags [.], cksum 0x0490 (correct), seq 1:1441, ack 776, win 35, options [nop,nop,TS val 216464418 ecr 580403884], length 1440
18:04:26.068126 IP (tos 0x68, ttl 58, id 32629, offset 0, flags [DF], proto TCP (6), length 1492)
ceta.3dnews.ru.http > 192.168.1.2.54918: Flags [.], cksum 0xec5c (correct), seq 1441:2881, ack 776, win 35, options [nop,nop,TS val 216464418 ecr 580403884], length 1440
18:04:26.068342 IP (tos 0x68, ttl 58, id 32630, offset 0, flags [DF], proto TCP (6), length 1492)
ceta.3dnews.ru.http > 192.168.1.2.54918: Flags [.], cksum 0xf50b (correct), seq 2881:4321, ack 776, win 35, options [nop,nop,TS val 216464418 ecr 580403884], length 1440
18:04:26.068351 IP (tos 0x68, ttl 58, id 32631, offset 0, flags [DF], proto TCP (6), length 1492)
ceta.3dnews.ru.http > 192.168.1.2.54918: Flags [.], cksum 0x9105 (correct), seq 4321:5761, ack 776, win 35, options [nop,nop,TS val 216464418 ecr 580403884], length 1440
18:04:26.068455 IP (tos 0x0, ttl 64, id 12419, offset 0, flags [DF], proto TCP (6), length 52)
192.168.1.2.54918 > ceta.3dnews.ru.http: Flags [.], cksum 0x9c92 (correct), seq 776, ack 2881, win 168, options [nop,nop,TS val 580403936 ecr 216464418], length 0
18:04:26.068567 IP (tos 0x68, ttl 58, id 32632, offset 0, flags [DF], proto TCP (6), length 1492)
ceta.3dnews.ru.http > 192.168.1.2.54918: Flags [.], cksum 0x257d (correct), seq 5761:7201, ack 776, win 35, options [nop,nop,TS val 216464418 ecr 580403884], length 1440
18:04:26.068627 IP (tos 0x0, ttl 64, id 12420, offset 0, flags [DF], proto TCP (6), length 52)
192.168.1.2.54918 > ceta.3dnews.ru.http: Flags [.], cksum 0x9125 (correct), seq 776, ack 5761, win 213, options [nop,nop,TS val 580403936 ecr 216464418], length 0
18:04:26.068832 IP (tos 0x68, ttl 58, id 32633, offset 0, flags [DF], proto TCP (6), length 1492)
ceta.3dnews.ru.http > 192.168.1.2.54918: Flags [.], cksum 0xc96e (correct), seq 7201:8641, ack 776, win 35, options [nop,nop,TS val 216464418 ecr 580403884], length 1440
18:04:26.068839 IP (tos 0x68, ttl 58, id 32634, offset 0, flags [DF], proto TCP (6), length 1492)
ceta.3dnews.ru.http > 192.168.1.2.54918: Flags [.], cksum 0xac27 (correct), seq 8641:10081, ack 776, win 35, options [nop,nop,TS val 216464418 ecr 580403884], length 1440
10 packets captured
75 packets received by filter
42 packets dropped by kernel
R2-D2 ~ # tcpdump -vvi eth1 -c 10 ip host linux.org.ru
error : ret -1
tcpdump: listening on eth1, link-type EN10MB (Ethernet), capture size 65535 bytes
18:05:36.754977 IP (tos 0x0, ttl 64, id 53097, offset 0, flags [DF], proto TCP (6), length 60)
192.168.1.2.52822 > linux.org.ru.https: Flags [S], cksum 0x1d31 (correct), seq 1414699286, win 14600, options [mss 1460,sackOK,TS val 580474495 ecr 0,nop,wscale 7], length 0
18:05:36.785842 IP (tos 0x70, ttl 58, id 0, offset 0, flags [DF], proto TCP (6), length 60)
linux.org.ru.https > 192.168.1.2.52822: Flags [S.], cksum 0x4811 (correct), seq 706505960, ack 1414699287, win 14480, options [mss 1460,sackOK,TS val 1722669012 ecr 580474495,nop,wscale 7], length 0
18:05:36.785905 IP (tos 0x0, ttl 64, id 53098, offset 0, flags [DF], proto TCP (6), length 52)
192.168.1.2.52822 > linux.org.ru.https: Flags [.], cksum 0xaedb (correct), seq 1, ack 1, win 115, options [nop,nop,TS val 580474526 ecr 1722669012], length 0
18:05:36.786181 IP (tos 0x0, ttl 64, id 53099, offset 0, flags [DF], proto TCP (6), length 257)
192.168.1.2.52822 > linux.org.ru.https: Flags [P.], cksum 0x2985 (correct), seq 1:206, ack 1, win 115, options [nop,nop,TS val 580474526 ecr 1722669012], length 205
18:05:36.817054 IP (tos 0x70, ttl 58, id 47899, offset 0, flags [DF], proto TCP (6), length 52)
linux.org.ru.https > 192.168.1.2.52822: Flags [.], cksum 0xade9 (correct), seq 1, ack 206, win 122, options [nop,nop,TS val 1722669042 ecr 580474526], length 0
18:05:36.818527 IP (tos 0x70, ttl 58, id 47900, offset 0, flags [DF], proto TCP (6), length 138)
linux.org.ru.https > 192.168.1.2.52822: Flags [P.], cksum 0xabf9 (correct), seq 1:87, ack 206, win 122, options [nop,nop,TS val 1722669044 ecr 580474526], length 86
18:05:36.818536 IP (tos 0x70, ttl 58, id 47901, offset 0, flags [DF], proto TCP (6), length 58)
linux.org.ru.https > 192.168.1.2.52822: Flags [P.], cksum 0x977f (correct), seq 87:93, ack 206, win 122, options [nop,nop,TS val 1722669044 ecr 580474526], length 6
18:05:36.818541 IP (tos 0x70, ttl 58, id 47902, offset 0, flags [DF], proto TCP (6), length 105)
linux.org.ru.https > 192.168.1.2.52822: Flags [P.], cksum 0x3703 (correct), seq 93:146, ack 206, win 122, options [nop,nop,TS val 1722669044 ecr 580474526], length 53
18:05:36.818622 IP (tos 0x0, ttl 64, id 53100, offset 0, flags [DF], proto TCP (6), length 52)
192.168.1.2.52822 > linux.org.ru.https: Flags [.], cksum 0xad77 (correct), seq 206, ack 87, win 115, options [nop,nop,TS val 580474559 ecr 1722669044], length 0
18:05:36.818646 IP (tos 0x0, ttl 64, id 53101, offset 0, flags [DF], proto TCP (6), length 52)
192.168.1.2.52822 > linux.org.ru.https: Flags [.], cksum 0xad71 (correct), seq 206, ack 93, win 115, options [nop,nop,TS val 580474559 ecr 1722669044], length 0
10 packets captured
108 packets received by filter
77 packets dropped by kernel
Исходная версия daemonpnz, :
tcpdump на компе роутере при открытии 3dnews и lor с ПК
R2-D2 ~ # tcpdump -vvi eth1 -c 10 ip host 3dnews.ru
error : ret -1
tcpdump: listening on eth1, link-type EN10MB (Ethernet), capture size 65535 bytes
18:04:26.015889 IP (tos 0x0, ttl 64, id 12418, offset 0, flags [DF], proto TCP (6), length 828)
192.168.1.2.54918 > ceta.3dnews.ru.http: Flags [P.], cksum 0xf658 (correct), seq 4109506130:4109506906, ack 3427706210, win 123, options [nop,nop,TS val 580403884 ecr 216456435], length 776
18:04:26.068115 IP (tos 0x68, ttl 58, id 32628, offset 0, flags [DF], proto TCP (6), length 1492)
ceta.3dnews.ru.http > 192.168.1.2.54918: Flags [.], cksum 0x0490 (correct), seq 1:1441, ack 776, win 35, options [nop,nop,TS val 216464418 ecr 580403884], length 1440
18:04:26.068126 IP (tos 0x68, ttl 58, id 32629, offset 0, flags [DF], proto TCP (6), length 1492)
ceta.3dnews.ru.http > 192.168.1.2.54918: Flags [.], cksum 0xec5c (correct), seq 1441:2881, ack 776, win 35, options [nop,nop,TS val 216464418 ecr 580403884], length 1440
18:04:26.068342 IP (tos 0x68, ttl 58, id 32630, offset 0, flags [DF], proto TCP (6), length 1492)
ceta.3dnews.ru.http > 192.168.1.2.54918: Flags [.], cksum 0xf50b (correct), seq 2881:4321, ack 776, win 35, options [nop,nop,TS val 216464418 ecr 580403884], length 1440
18:04:26.068351 IP (tos 0x68, ttl 58, id 32631, offset 0, flags [DF], proto TCP (6), length 1492)
ceta.3dnews.ru.http > 192.168.1.2.54918: Flags [.], cksum 0x9105 (correct), seq 4321:5761, ack 776, win 35, options [nop,nop,TS val 216464418 ecr 580403884], length 1440
18:04:26.068455 IP (tos 0x0, ttl 64, id 12419, offset 0, flags [DF], proto TCP (6), length 52)
192.168.1.2.54918 > ceta.3dnews.ru.http: Flags [.], cksum 0x9c92 (correct), seq 776, ack 2881, win 168, options [nop,nop,TS val 580403936 ecr 216464418], length 0
18:04:26.068567 IP (tos 0x68, ttl 58, id 32632, offset 0, flags [DF], proto TCP (6), length 1492)
ceta.3dnews.ru.http > 192.168.1.2.54918: Flags [.], cksum 0x257d (correct), seq 5761:7201, ack 776, win 35, options [nop,nop,TS val 216464418 ecr 580403884], length 1440
18:04:26.068627 IP (tos 0x0, ttl 64, id 12420, offset 0, flags [DF], proto TCP (6), length 52)
192.168.1.2.54918 > ceta.3dnews.ru.http: Flags [.], cksum 0x9125 (correct), seq 776, ack 5761, win 213, options [nop,nop,TS val 580403936 ecr 216464418], length 0
18:04:26.068832 IP (tos 0x68, ttl 58, id 32633, offset 0, flags [DF], proto TCP (6), length 1492)
ceta.3dnews.ru.http > 192.168.1.2.54918: Flags [.], cksum 0xc96e (correct), seq 7201:8641, ack 776, win 35, options [nop,nop,TS val 216464418 ecr 580403884], length 1440
18:04:26.068839 IP (tos 0x68, ttl 58, id 32634, offset 0, flags [DF], proto TCP (6), length 1492)
ceta.3dnews.ru.http > 192.168.1.2.54918: Flags [.], cksum 0xac27 (correct), seq 8641:10081, ack 776, win 35, options [nop,nop,TS val 216464418 ecr 580403884], length 1440
10 packets captured
75 packets received by filter
42 packets dropped by kernel
R2-D2 ~ # tcpdump -vvi eth1 -c 10 ip host linux.org.ru
error : ret -1
tcpdump: listening on eth1, link-type EN10MB (Ethernet), capture size 65535 bytes
18:05:36.754977 IP (tos 0x0, ttl 64, id 53097, offset 0, flags [DF], proto TCP (6), length 60)
192.168.1.2.52822 > linux.org.ru.https: Flags [S], cksum 0x1d31 (correct), seq 1414699286, win 14600, options [mss 1460,sackOK,TS val 580474495 ecr 0,nop,wscale 7], length 0
18:05:36.785842 IP (tos 0x70, ttl 58, id 0, offset 0, flags [DF], proto TCP (6), length 60)
linux.org.ru.https > 192.168.1.2.52822: Flags [S.], cksum 0x4811 (correct), seq 706505960, ack 1414699287, win 14480, options [mss 1460,sackOK,TS val 1722669012 ecr 580474495,nop,wscale 7], length 0
18:05:36.785905 IP (tos 0x0, ttl 64, id 53098, offset 0, flags [DF], proto TCP (6), length 52)
192.168.1.2.52822 > linux.org.ru.https: Flags [.], cksum 0xaedb (correct), seq 1, ack 1, win 115, options [nop,nop,TS val 580474526 ecr 1722669012], length 0
18:05:36.786181 IP (tos 0x0, ttl 64, id 53099, offset 0, flags [DF], proto TCP (6), length 257)
192.168.1.2.52822 > linux.org.ru.https: Flags [P.], cksum 0x2985 (correct), seq 1:206, ack 1, win 115, options [nop,nop,TS val 580474526 ecr 1722669012], length 205
18:05:36.817054 IP (tos 0x70, ttl 58, id 47899, offset 0, flags [DF], proto TCP (6), length 52)
linux.org.ru.https > 192.168.1.2.52822: Flags [.], cksum 0xade9 (correct), seq 1, ack 206, win 122, options [nop,nop,TS val 1722669042 ecr 580474526], length 0
18:05:36.818527 IP (tos 0x70, ttl 58, id 47900, offset 0, flags [DF], proto TCP (6), length 138)
linux.org.ru.https > 192.168.1.2.52822: Flags [P.], cksum 0xabf9 (correct), seq 1:87, ack 206, win 122, options [nop,nop,TS val 1722669044 ecr 580474526], length 86
18:05:36.818536 IP (tos 0x70, ttl 58, id 47901, offset 0, flags [DF], proto TCP (6), length 58)
linux.org.ru.https > 192.168.1.2.52822: Flags [P.], cksum 0x977f (correct), seq 87:93, ack 206, win 122, options [nop,nop,TS val 1722669044 ecr 580474526], length 6
18:05:36.818541 IP (tos 0x70, ttl 58, id 47902, offset 0, flags [DF], proto TCP (6), length 105)
linux.org.ru.https > 192.168.1.2.52822: Flags [P.], cksum 0x3703 (correct), seq 93:146, ack 206, win 122, options [nop,nop,TS val 1722669044 ecr 580474526], length 53
18:05:36.818622 IP (tos 0x0, ttl 64, id 53100, offset 0, flags [DF], proto TCP (6), length 52)
192.168.1.2.52822 > linux.org.ru.https: Flags [.], cksum 0xad77 (correct), seq 206, ack 87, win 115, options [nop,nop,TS val 580474559 ecr 1722669044], length 0
18:05:36.818646 IP (tos 0x0, ttl 64, id 53101, offset 0, flags [DF], proto TCP (6), length 52)
192.168.1.2.52822 > linux.org.ru.https: Flags [.], cksum 0xad71 (correct), seq 206, ack 93, win 115, options [nop,nop,TS val 580474559 ecr 1722669044], length 0
10 packets captured
108 packets received by filter
77 packets dropped by kernel