diff --git a/file41 b/file41 new file mode 100644 index 0000000..e7d3330 --- /dev/null +++ b/file41 @@ -0,0 +1,25 @@ +10:01:15.131173 ens18 Out IP jump01.gt-tiso.ikeja.co.za.ssh > 10.186.0.1.51634: Flags [P.], seq 2710761334:2710761430, ack 3131483549, win 124, length 96 +10:01:15.132582 ens18 Out IP jump01.gt-tiso.ikeja.co.za.ssh > 10.186.0.1.51634: Flags [P.], seq 96:320, ack 1, win 124, length 224 +10:01:15.331099 ens18 In IP 10.186.0.1.51634 > jump01.gt-tiso.ikeja.co.za.ssh: Flags [.], ack 96, win 255, length 0 +10:01:15.388532 ens18 In IP 10.186.0.1.51634 > jump01.gt-tiso.ikeja.co.za.ssh: Flags [.], ack 320, win 255, length 0 +10:01:16.158310 lo In IP localhost.49087 > _localdnsstub.domain: 38745+ [1au] PTR? 1.0.186.10.in-addr.arpa. (52) +10:01:16.158774 ens18 Out IP jump01.gt-tiso.ikeja.co.za.41595 > _gateway.domain: 59261+ PTR? 1.0.186.10.in-addr.arpa. (41) +10:01:16.159296 ens18 In IP _gateway.domain > jump01.gt-tiso.ikeja.co.za.41595: 59261 NXDomain 0/0/0 (41) +10:01:16.159491 lo In IP _localdnsstub.domain > localhost.49087: 38745 NXDomain 0/0/1 (52) +10:01:16.159615 lo In IP localhost.44145 > _localdnsstub.domain: 6611+ [1au] PTR? 2.12.210.10.in-addr.arpa. (53) +10:01:16.159760 lo In IP _localdnsstub.domain > localhost.44145: 6611 1/0/2 PTR jump01.gt-tiso.ikeja.co.za. (109) +10:01:16.398908 ens18 In IP 10.186.0.1.51634 > jump01.gt-tiso.ikeja.co.za.ssh: Flags [P.], seq 1:65, ack 320, win 255, length 64 +10:01:16.399413 ens18 Out IP jump01.gt-tiso.ikeja.co.za.ssh > 10.186.0.1.51634: Flags [P.], seq 320:384, ack 65, win 124, length 64 +10:01:16.569081 ens18 In IP 10.186.0.1.51634 > jump01.gt-tiso.ikeja.co.za.ssh: Flags [P.], seq 65:129, ack 320, win 255, length 64 +10:01:16.569950 ens18 Out IP jump01.gt-tiso.ikeja.co.za.ssh > 10.186.0.1.51634: Flags [P.], seq 384:448, ack 129, win 124, length 64 +10:01:16.647741 ens18 In IP 10.186.0.1.51634 > jump01.gt-tiso.ikeja.co.za.ssh: Flags [.], ack 384, win 254, length 0 +10:01:16.740575 ens18 In IP 10.186.0.1.51634 > jump01.gt-tiso.ikeja.co.za.ssh: Flags [P.], seq 129:193, ack 384, win 254, length 64 +10:01:16.741236 ens18 Out IP jump01.gt-tiso.ikeja.co.za.ssh > 10.186.0.1.51634: Flags [P.], seq 448:512, ack 193, win 124, length 64 +10:01:16.834576 ens18 In IP 10.186.0.1.51634 > jump01.gt-tiso.ikeja.co.za.ssh: Flags [.], ack 448, win 254, length 0 +10:01:16.905278 ens18 In IP 10.186.0.1.51634 > jump01.gt-tiso.ikeja.co.za.ssh: Flags [P.], seq 193:257, ack 448, win 254, length 64 +10:01:16.905932 ens18 Out IP jump01.gt-tiso.ikeja.co.za.ssh > 10.186.0.1.51634: Flags [P.], seq 512:576, ack 257, win 124, length 64 +10:01:16.998899 ens18 In IP 10.186.0.1.51634 > jump01.gt-tiso.ikeja.co.za.ssh: Flags [.], ack 512, win 254, length 0 +10:01:17.051162 ens18 In IP 10.186.0.1.51634 > jump01.gt-tiso.ikeja.co.za.ssh: Flags [P.], seq 257:321, ack 512, win 254, length 64 +10:01:17.051992 ens18 Out IP jump01.gt-tiso.ikeja.co.za.ssh > 10.186.0.1.51634: Flags [P.], seq 576:640, ack 321, win 124, length 64 +10:01:17.149869 ens18 In IP 10.186.0.1.51634 > jump01.gt-tiso.ikeja.co.za.ssh: Flags [.], ack 576, win 254, length 0 + diff --git a/file42 b/file42 new file mode 100644 index 0000000..087c1f2 --- /dev/null +++ b/file42 @@ -0,0 +1,19 @@ +10:03:13.443257 ens18 Out IP jump01.gt-tiso.ikeja.co.za.ssh > 10.186.0.1.51634: Flags [P.], seq 2710778582:2710778678, ack 3131494909, win 124, length 96 +10:03:13.445113 ens18 Out IP jump01.gt-tiso.ikeja.co.za.ssh > 10.186.0.1.51634: Flags [P.], seq 96:320, ack 1, win 124, length 224 +10:03:13.647930 ens18 In IP 10.186.0.1.51634 > jump01.gt-tiso.ikeja.co.za.ssh: Flags [.], ack 96, win 252, length 0 +10:03:13.708649 ens18 In IP 10.186.0.1.51634 > jump01.gt-tiso.ikeja.co.za.ssh: Flags [.], ack 320, win 251, length 0 +10:03:14.494198 lo In IP localhost.60449 > _localdnsstub.domain: 7407+ [1au] PTR? 1.0.186.10.in-addr.arpa. (52) +10:03:14.494917 ens18 Out IP jump01.gt-tiso.ikeja.co.za.46337 > _gateway.domain: 38121+ PTR? 1.0.186.10.in-addr.arpa. (41) +10:03:14.495205 ens18 In IP _gateway.domain > jump01.gt-tiso.ikeja.co.za.46337: 38121 NXDomain 0/0/0 (41) +10:03:14.495393 lo In IP _localdnsstub.domain > localhost.60449: 7407 NXDomain 0/0/1 (52) +10:03:14.495513 lo In IP localhost.49104 > _localdnsstub.domain: 16997+ [1au] PTR? 2.12.210.10.in-addr.arpa. (53) +10:03:14.495647 lo In IP _localdnsstub.domain > localhost.49104: 16997 1/0/2 PTR jump01.gt-tiso.ikeja.co.za. (109) +10:03:15.518149 lo In IP localhost.54468 > _localdnsstub.domain: 50188+ [1au] PTR? 53.0.0.127.in-addr.arpa. (52) +10:03:15.518514 lo In IP _localdnsstub.domain > localhost.54468: 50188*$ 1/0/1 PTR _localdnsstub. (79) +10:03:15.518919 lo In IP localhost.57025 > _localdnsstub.domain: 64884+ [1au] PTR? 1.12.210.10.in-addr.arpa. (53) +10:03:15.519105 ens18 Out IP jump01.gt-tiso.ikeja.co.za.54856 > _gateway.domain: 27966+ PTR? 1.12.210.10.in-addr.arpa. (42) +10:03:15.519346 ens18 In IP _gateway.domain > jump01.gt-tiso.ikeja.co.za.54856: 27966 NXDomain 0/0/0 (42) +10:03:15.519505 lo In IP _localdnsstub.domain > localhost.57025: 64884*$ 1/0/1 PTR _gateway. (75) +10:03:20.558156 ens18 In ARP, Request who-has jump01.gt-tiso.ikeja.co.za tell _gateway, length 28 +10:03:20.558174 ens18 Out ARP, Reply jump01.gt-tiso.ikeja.co.za is-at bc:24:11:06:fd:e2 (oui Unknown), length 28 +