vyatta@infra-vyatta-1# sudo tcpdump -n -i bond0.960 'host 192.168.100.50 and net 192.168.200.128/25'
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on bond0.960, link-type EN10MB (Ethernet), capture size 65535 bytes
10:53:11.827772 IP 192.168.100.50.45469 > 192.168.200.133.53: 26088+ A? mgt-dc-001.testdom.local. (42)
10:53:13.830638 IP 192.168.100.50.35723 > 192.168.200.134.53: 26088+ A? mgt-dc-001.testdom.local. (42)
10:53:13.831086 IP 192.168.200.134.53 > 192.168.100.50.35723: 26088* 1/0/0 A 192.168.200.133 (58)
10:53:13.831947 IP 192.168.100.50.47724 > 192.168.200.133.389: Flags [S], seq 2972274825, win 14600, options [mss 1460,sackOK,TS val 243116340 ecr 0,nop,wscale 6], length 0
10:53:14.831785 IP 192.168.100.50.47724 > 192.168.200.133.389: Flags [S], seq 2972274825, win 14600, options [mss 1460,sackOK,TS val 243117340 ecr 0,nop,wscale 6], length 0
10:53:16.831699 IP 192.168.100.50.47724 > 192.168.200.133.389: Flags [S], seq 2972274825, win 14600, options [mss 1460,sackOK,TS val 243119340 ecr 0,nop,wscale 6], length 0
10:53:19.838775 IP 192.168.100.50.48472 > 192.168.200.134.53: 23125+ A? mgt-dc-002.testdom.local. (42)
10:53:19.839221 IP 192.168.200.134.53 > 192.168.100.50.48472: 23125* 1/0/0 A 192.168.200.134 (58)
10:53:19.839970 IP 192.168.100.50.37228 > 192.168.200.134.389: Flags [S], seq 3696688223, win 14600, options [mss 1460,sackOK,TS val 243122348 ecr 0,nop,wscale 6], length 0
10:53:19.840328 IP 192.168.200.134.389 > 192.168.100.50.37228: Flags [S.], seq 3826122648, ack 3696688224, win 8192, options [mss 1460,nop,wscale 8,sackOK,TS val 497300367 ecr 243122348], length 0
10:53:19.840611 IP 192.168.100.50.37228 > 192.168.200.134.389: Flags [.], ack 1, win 229, options [nop,nop,TS val 243122349 ecr 497300367], length 0
10:53:19.841129 IP 192.168.100.50.37228 > 192.168.200.134.389: Flags [P.], seq 1:261, ack 1, win 229, options [nop,nop,TS val 243122349 ecr 497300367], length 260
10:53:19.841485 IP 192.168.200.134.389 > 192.168.100.50.37228: Flags [P.], seq 1:3051, ack 261, win 260, options [nop,nop,TS val 497300367 ecr 243122349], length 3050
10:53:19.841731 IP 192.168.100.50.37228 > 192.168.200.134.389: Flags [.], ack 1449, win 274, options [nop,nop,TS val 243122350 ecr 497300367], length 0
10:53:19.841762 IP 192.168.100.50.37228 > 192.168.200.134.389: Flags [.], ack 2897, win 319, options [nop,nop,TS val 243122350 ecr 497300367], length 0
10:53:19.841769 IP 192.168.100.50.37228 > 192.168.200.134.389: Flags [.], ack 3051, win 364, options [nop,nop,TS val 243122350 ecr 497300367], length 0
10:53:19.850765 IP 192.168.100.50.47827 > 192.168.200.134.53: 25629+ A? mgt-dc-001.testdom.local. (42)
10:53:19.850795 IP 192.168.100.50.47827 > 192.168.200.134.53: 22599+ AAAA? mgt-dc-001.testdom.local. (42)
10:53:19.851131 IP 192.168.200.134.53 > 192.168.100.50.47827: 25629* 1/0/0 A 192.168.200.133 (58)
10:53:19.851141 IP 192.168.200.134.53 > 192.168.100.50.47827: 22599* 0/1/0 (100)
10:53:19.851767 IP 192.168.100.50.59273 > 192.168.200.133.88:  v5
10:53:20.852991 IP 192.168.100.50.40561 > 192.168.200.133.53: 10788+ A? mgt-dc-001.testdom.local. (42)
10:53:21.854126 IP 192.168.100.50.49935 > 192.168.200.134.53: 10788+ A? mgt-dc-001.testdom.local. (42)
10:53:21.854563 IP 192.168.200.134.53 > 192.168.100.50.49935: 10788* 1/0/0 A 192.168.200.133 (58)
10:53:21.855249 IP 192.168.100.50.54301 > 192.168.200.133.750:  v5
10:53:22.856570 IP 192.168.100.50.37681 > 192.168.200.134.53: 55873+ A? mgt-dc-002.testdom.local. (42)
10:53:22.856605 IP 192.168.100.50.37681 > 192.168.200.134.53: 2686+ AAAA? mgt-dc-002.testdom.local. (42)
10:53:22.863185 IP 192.168.200.134.53 > 192.168.100.50.37681: 2686* 0/1/0 (89)
10:53:22.863195 IP 192.168.200.134.53 > 192.168.100.50.37681: 55873* 1/0/0 A 192.168.200.134 (58)
10:53:22.863745 IP 192.168.100.50.37767 > 192.168.200.134.88:  v5
10:53:22.865560 IP 192.168.200.134.88 > 192.168.100.50.37767:
10:53:22.866828 IP 192.168.100.50.59153 > 192.168.200.133.53: 47628+ A? mgt-dc-001.testdom.local. (42)
10:53:22.866869 IP 192.168.100.50.59153 > 192.168.200.133.53: 48806+ AAAA? mgt-dc-001.testdom.local. (42)
10:53:23.866933 IP 192.168.100.50.37503 > 192.168.200.134.53: 47628+ A? mgt-dc-001.testdom.local. (42)
10:53:23.866973 IP 192.168.100.50.37503 > 192.168.200.134.53: 48806+ AAAA? mgt-dc-001.testdom.local. (42)
10:53:23.867406 IP 192.168.200.134.53 > 192.168.100.50.37503: 48806* 0/1/0 (100)
10:53:23.867418 IP 192.168.200.134.53 > 192.168.100.50.37503: 47628* 1/0/0 A 192.168.200.133 (58)
10:53:23.867937 IP 192.168.100.50.48203 > 192.168.200.133.88:  v5
10:53:24.869985 IP 192.168.100.50.50982 > 192.168.200.134.53: 25139+ A? mgt-dc-001.testdom.local. (42)
10:53:24.870417 IP 192.168.200.134.53 > 192.168.100.50.50982: 25139* 1/0/0 A 192.168.200.133 (58)
10:53:24.870742 IP 192.168.100.50.60874 > 192.168.200.133.750:  v5
10:53:25.851127 IP 192.168.100.50.37228 > 192.168.200.134.389: Flags [P.], seq 261:268, ack 3051, win 364, options [nop,nop,TS val 243128359 ecr 497300367], length 7
10:53:25.851145 IP 192.168.100.50.37228 > 192.168.200.134.389: Flags [F.], seq 268, ack 3051, win 364, options [nop,nop,TS val 243128359 ecr 497300367], length 0
10:53:25.851438 IP 192.168.200.134.389 > 192.168.100.50.37228: Flags [.], ack 269, win 260, options [nop,nop,TS val 497300968 ecr 243128359], length 0
10:53:25.851471 IP 192.168.200.134.389 > 192.168.100.50.37228: Flags [R.], seq 3051, ack 269, win 0, length 0
10:53:52.727604 IP 192.168.100.50.60491 > 192.168.200.134.53: 16846+ A? mgt-dc-001.testdom.local. (42)
10:53:52.727643 IP 192.168.100.50.60491 > 192.168.200.134.53: 40365+ AAAA? mgt-dc-001.testdom.local. (42)
10:53:52.728074 IP 192.168.200.134.53 > 192.168.100.50.60491: 16846* 1/0/0 A 192.168.200.133 (58)
10:53:52.728087 IP 192.168.200.134.53 > 192.168.100.50.60491: 40365* 0/1/0 (100)
10:53:52.731109 IP 192.168.100.50.46978 > 192.168.200.133.88:
10:53:53.732278 IP 192.168.100.50.54982 > 192.168.200.133.53: 36116+ A? mgt-dc-001.testdom.local. (42)
10:53:54.733433 IP 192.168.100.50.58638 > 192.168.200.134.53: 36116+ A? mgt-dc-001.testdom.local. (42)
10:53:54.733872 IP 192.168.200.134.53 > 192.168.100.50.58638: 36116* 1/0/0 A 192.168.200.133 (58)
10:53:54.734383 IP 192.168.100.50.39869 > 192.168.200.133.750:
10:53:55.735717 IP 192.168.100.50.50711 > 192.168.200.134.53: 26517+ A? mgt-dc-002.testdom.local. (42)
10:53:55.735755 IP 192.168.100.50.50711 > 192.168.200.134.53: 19759+ AAAA? mgt-dc-002.testdom.local. (42)
10:53:55.736197 IP 192.168.200.134.53 > 192.168.100.50.50711: 26517* 1/0/0 A 192.168.200.134 (58)
10:53:55.736205 IP 192.168.200.134.53 > 192.168.100.50.50711: 19759* 0/1/0 (89)
10:53:55.736715 IP 192.168.100.50.60329 > 192.168.200.134.88:
10:53:55.737243 IP 192.168.200.134.88 > 192.168.100.50.60329:
10:53:55.738221 IP 192.168.100.50.33820 > 192.168.200.133.53: 33590+ A? mgt-dc-001.testdom.local. (42)
10:53:55.738259 IP 192.168.100.50.33820 > 192.168.200.133.53: 54600+ AAAA? mgt-dc-001.testdom.local. (42)
10:53:56.738347 IP 192.168.100.50.33370 > 192.168.200.134.53: 33590+ A? mgt-dc-001.testdom.local. (42)
10:53:56.738402 IP 192.168.100.50.33370 > 192.168.200.134.53: 54600+ AAAA? mgt-dc-001.testdom.local. (42)
10:53:56.738855 IP 192.168.200.134.53 > 192.168.100.50.33370: 33590* 1/0/0 A 192.168.200.133 (58)
10:53:56.738868 IP 192.168.200.134.53 > 192.168.100.50.33370: 54600* 0/1/0 (100)
10:53:56.739410 IP 192.168.100.50.56201 > 192.168.200.133.88:
10:53:57.740657 IP 192.168.100.50.38032 > 192.168.200.134.53: 14213+ A? mgt-dc-001.testdom.local. (42)
10:53:57.741068 IP 192.168.200.134.53 > 192.168.100.50.38032: 14213* 1/0/0 A 192.168.200.133 (58)
10:53:57.741543 IP 192.168.100.50.38028 > 192.168.200.133.750:
10:53:58.742784 IP 192.168.100.50.36900 > 192.168.200.133.53: 29009+ A? mgt-dc-002.testdom.local. (42)
10:53:58.742804 IP 192.168.100.50.36900 > 192.168.200.133.53: 18232+ AAAA? mgt-dc-002.testdom.local. (42)
10:53:59.742821 IP 192.168.100.50.35707 > 192.168.200.134.53: 29009+ A? mgt-dc-002.testdom.local. (42)
10:53:59.742865 IP 192.168.100.50.35707 > 192.168.200.134.53: 18232+ AAAA? mgt-dc-002.testdom.local. (42)
10:53:59.743307 IP 192.168.200.134.53 > 192.168.100.50.35707: 29009* 1/0/0 A 192.168.200.134 (58)
10:53:59.743316 IP 192.168.200.134.53 > 192.168.100.50.35707: 18232* 0/1/0 (89)
10:53:59.743862 IP 192.168.100.50.41322 > 192.168.200.134.88:
10:53:59.744412 IP 192.168.200.134.88 > 192.168.100.50.41322:
10:53:59.746404 IP 192.168.100.50.36925 > 192.168.200.134.53: 12787+ A? mgt-dc-001.testdom.local. (42)
10:53:59.746459 IP 192.168.100.50.36925 > 192.168.200.134.53: 49094+ AAAA? mgt-dc-001.testdom.local. (42)
10:53:59.746852 IP 192.168.200.134.53 > 192.168.100.50.36925: 12787* 1/0/0 A 192.168.200.133 (58)
10:53:59.746862 IP 192.168.200.134.53 > 192.168.100.50.36925: 49094* 0/1/0 (100)
10:53:59.747445 IP 192.168.100.50.41058 > 192.168.200.133.88:
10:54:00.748594 IP 192.168.100.50.46475 > 192.168.200.133.53: 35264+ A? mgt-dc-001.testdom.local. (42)
10:54:01.749770 IP 192.168.100.50.46823 > 192.168.200.134.53: 35264+ A? mgt-dc-001.testdom.local. (42)
10:54:01.750335 IP 192.168.200.134.53 > 192.168.100.50.46823: 35264* 1/0/0 A 192.168.200.133 (58)
10:54:01.750846 IP 192.168.100.50.42884 > 192.168.200.133.750:
10:54:02.752062 IP 192.168.100.50.54983 > 192.168.200.134.53: 6979+ A? mgt-dc-002.testdom.local. (42)
10:54:02.752093 IP 192.168.100.50.54983 > 192.168.200.134.53: 36318+ AAAA? mgt-dc-002.testdom.local. (42)
10:54:02.752544 IP 192.168.200.134.53 > 192.168.100.50.54983: 6979* 1/0/0 A 192.168.200.134 (58)
10:54:02.752563 IP 192.168.200.134.53 > 192.168.100.50.54983: 36318* 0/1/0 (89)
10:54:02.752963 IP 192.168.100.50.48894 > 192.168.200.134.88:
10:54:02.753436 IP 192.168.200.134.88 > 192.168.100.50.48894:
10:54:02.754289 IP 192.168.100.50.50913 > 192.168.200.133.53: 39706+ A? mgt-dc-001.testdom.local. (42)
10:54:02.754305 IP 192.168.100.50.50913 > 192.168.200.133.53: 5470+ AAAA? mgt-dc-001.testdom.local. (42)
10:54:03.754504 IP 192.168.100.50.39030 > 192.168.200.134.53: 39706+ A? mgt-dc-001.testdom.local. (42)
10:54:03.754530 IP 192.168.100.50.39030 > 192.168.200.134.53: 5470+ AAAA? mgt-dc-001.testdom.local. (42)
10:54:03.754863 IP 192.168.200.134.53 > 192.168.100.50.39030: 39706* 1/0/0 A 192.168.200.133 (58)
10:54:03.754990 IP 192.168.200.134.53 > 192.168.100.50.39030: 5470* 0/1/0 (100)
10:54:03.755476 IP 192.168.100.50.55322 > 192.168.200.133.88:
10:54:04.756798 IP 192.168.100.50.56297 > 192.168.200.134.53: 34699+ A? mgt-dc-001.testdom.local. (42)
10:54:04.757212 IP 192.168.200.134.53 > 192.168.100.50.56297: 34699* 1/0/0 A 192.168.200.133 (58)
10:54:04.757749 IP 192.168.100.50.37162 > 192.168.200.133.750:
10:54:05.759045 IP 192.168.100.50.45251 > 192.168.200.133.53: 44019+ A? mgt-dc-002.testdom.local. (42)
10:54:05.759069 IP 192.168.100.50.45251 > 192.168.200.133.53: 17277+ AAAA? mgt-dc-002.testdom.local. (42)
10:54:06.759136 IP 192.168.100.50.54802 > 192.168.200.134.53: 44019+ A? mgt-dc-002.testdom.local. (42)
10:54:06.759162 IP 192.168.100.50.54802 > 192.168.200.134.53: 17277+ AAAA? mgt-dc-002.testdom.local. (42)
10:54:06.759509 IP 192.168.200.134.53 > 192.168.100.50.54802: 44019* 1/0/0 A 192.168.200.134 (58)
10:54:06.759526 IP 192.168.200.134.53 > 192.168.100.50.54802: 17277* 0/1/0 (89)
10:54:06.760000 IP 192.168.100.50.57949 > 192.168.200.134.88:
10:54:06.760471 IP 192.168.200.134.88 > 192.168.100.50.57949:
10:54:06.762197 IP 192.168.100.50.60025 > 192.168.200.134.53: 295+ A? mgt-dc-001.testdom.local. (42)
10:54:06.762228 IP 192.168.100.50.60025 > 192.168.200.134.53: 38887+ AAAA? mgt-dc-001.testdom.local. (42)
10:54:06.762563 IP 192.168.200.134.53 > 192.168.100.50.60025: 295* 1/0/0 A 192.168.200.133 (58)
10:54:06.762571 IP 192.168.200.134.53 > 192.168.100.50.60025: 38887* 0/1/0 (100)
10:54:06.762954 IP 192.168.100.50.36474 > 192.168.200.133.88:
10:54:07.764235 IP 192.168.100.50.39178 > 192.168.200.133.53: 23358+ A? mgt-dc-001.testdom.local. (42)
10:54:08.765455 IP 192.168.100.50.36685 > 192.168.200.134.53: 23358+ A? mgt-dc-001.testdom.local. (42)
10:54:08.765908 IP 192.168.200.134.53 > 192.168.100.50.36685: 23358* 1/0/0 A 192.168.200.133 (58)
10:54:08.766432 IP 192.168.100.50.36678 > 192.168.200.133.750:
10:54:09.767648 IP 192.168.100.50.57809 > 192.168.200.134.53: 56683+ A? mgt-dc-002.testdom.local. (42)
10:54:09.767678 IP 192.168.100.50.57809 > 192.168.200.134.53: 9147+ AAAA? mgt-dc-002.testdom.local. (42)
10:54:09.768137 IP 192.168.200.134.53 > 192.168.100.50.57809: 56683* 1/0/0 A 192.168.200.134 (58)
10:54:09.768146 IP 192.168.200.134.53 > 192.168.100.50.57809: 9147* 0/1/0 (89)
10:54:09.768695 IP 192.168.100.50.37376 > 192.168.200.134.88:
10:54:09.769219 IP 192.168.200.134.88 > 192.168.100.50.37376:
10:54:09.770170 IP 192.168.100.50.36763 > 192.168.200.133.53: 37657+ A? mgt-dc-001.testdom.local. (42)
10:54:09.770188 IP 192.168.100.50.36763 > 192.168.200.133.53: 21379+ AAAA? mgt-dc-001.testdom.local. (42)
10:54:10.770227 IP 192.168.100.50.50549 > 192.168.200.134.53: 37657+ A? mgt-dc-001.testdom.local. (42)
10:54:10.770279 IP 192.168.100.50.50549 > 192.168.200.134.53: 21379+ AAAA? mgt-dc-001.testdom.local. (42)
10:54:10.770706 IP 192.168.200.134.53 > 192.168.100.50.50549: 37657* 1/0/0 A 192.168.200.133 (58)
10:54:10.770714 IP 192.168.200.134.53 > 192.168.100.50.50549: 21379* 0/1/0 (100)
10:54:10.771132 IP 192.168.100.50.58675 > 192.168.200.133.88:
10:54:11.772483 IP 192.168.100.50.59308 > 192.168.200.134.53: 31120+ A? mgt-dc-001.testdom.local. (42)
10:54:11.772954 IP 192.168.200.134.53 > 192.168.100.50.59308: 31120* 1/0/0 A 192.168.200.133 (58)
10:54:11.773514 IP 192.168.100.50.40044 > 192.168.200.133.750:
10:54:12.774663 IP 192.168.100.50.44153 > 192.168.200.133.53: 41361+ A? mgt-dc-002.testdom.local. (42)
10:54:12.774679 IP 192.168.100.50.44153 > 192.168.200.133.53: 54690+ AAAA? mgt-dc-002.testdom.local. (42)
10:54:13.774784 IP 192.168.100.50.52677 > 192.168.200.134.53: 41361+ A? mgt-dc-002.testdom.local. (42)
10:54:13.774812 IP 192.168.100.50.52677 > 192.168.200.134.53: 54690+ AAAA? mgt-dc-002.testdom.local. (42)
10:54:13.775250 IP 192.168.200.134.53 > 192.168.100.50.52677: 41361* 1/0/0 A 192.168.200.134 (58)
10:54:13.775257 IP 192.168.200.134.53 > 192.168.100.50.52677: 54690* 0/1/0 (89)
10:54:13.775868 IP 192.168.100.50.49673 > 192.168.200.134.88:
10:54:13.776360 IP 192.168.200.134.88 > 192.168.100.50.49673:
^C
144 packets captured
285 packets received by filter
92 packets dropped by kernel
[edit]
vyatta@infra-vyatta-1#
