Wget, Yum and network investigation
antonio montagnani
antonio.montagnani at gmail.com
Mon Feb 27 18:07:32 UTC 2006
2006/2/27, Bob Chiodini <rchiodin at bellsouth.net>:
> On Mon, 2006-02-27 at 14:12 +0100, antonio montagnani wrote:
> > 2006/2/27, antonio montagnani <antonio.montagnani at gmail.com>:
> > > 2006/2/27, antonio montagnani <antonio.montagnani at gmail.com>:
> > > >
> >
> >
> > This is the text file ofethereal dumping with failure using wget
> > http://download.fedora.redhat.com/pub/fedora/linux/core/4/i386/os/repodata/repomd.xml
> > ____________________________________________________________________________
> > No. Time Source Destination Protocol Info
> > 1 0.000000 218.219.30.89 87.4.92.27 TCP
> > 35214 > 1238 [PSH, ACK] Seq=0 Ack=0 Win=64617 Len=201
> >
> > Frame 1 (263 bytes on wire, 263 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 218.219.30.89 (218.219.30.89), Dst: 87.4.92.27
> > (87.4.92.27)
> > Transmission Control Protocol, Src Port: 35214 (35214), Dst Port: 1238
> > (1238), Seq: 0, Ack: 0, Len: 201
> > Data (201 bytes)
> >
> > 0000 90 99 45 d1 4f 07 13 e4 cb 17 c9 da 6c 50 0e 96 ..E.O.......lP..
> > 0010 9c 78 ae a1 65 ec 20 27 ce 53 60 28 8f b5 48 8e .x..e. '.S`(..H.
> > 0020 ba d8 fe 99 94 53 b8 4a 16 fe e5 25 98 b9 3d ca .....S.J...%..=.
> > 0030 a2 a7 0c 78 97 76 1f a6 ef 3e db 77 93 96 4a 2d ...x.v...>.w..J-
> > 0040 b0 22 33 df ad b9 14 63 12 ca 4e c1 f8 7a a5 bd ."3....c..N..z..
> > 0050 fa 0d 4a 4b b2 be ea 0b 25 f0 18 8b 05 a0 7e 0e ..JK....%.....~.
> > 0060 cf 28 bb 06 75 5f 3d 5c 2c 19 0a df 44 12 77 b2 .(..u_=\,...D.w.
> > 0070 bb 56 a7 ba 3a 4a be 17 59 50 81 24 1e 3e 67 b0 .V..:J..YP.$.>g.
> > 0080 c1 66 14 0b 66 10 bf dd 64 96 d4 fd c1 83 4b 42 .f..f...d.....KB
> > 0090 12 4c f4 8b 67 2c 5d 20 a7 f2 af b6 97 b3 71 79 .L..g,] ......qy
> > 00a0 0a 52 3c c0 79 8c 59 96 3e c8 26 47 ff 59 25 8c .R<.y.Y.>.&G.Y%.
> > 00b0 68 66 f8 98 c3 c7 47 7d 9e 1f ce 41 f9 7c 46 65 hf....G}...A.|Fe
> > 00c0 3f 69 8f 67 61 31 32 b3 bb ?i.ga12..
> >
> > No. Time Source Destination Protocol Info
> > 2 0.003637 87.4.92.27 218.219.30.89 TCP
> > 1238 > 35214 [PSH, ACK] Seq=0 Ack=201 Win=16605 Len=16
> >
> > Frame 2 (78 bytes on wire, 78 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 218.219.30.89
> > (218.219.30.89)
> > Transmission Control Protocol, Src Port: 1238 (1238), Dst Port: 35214
> > (35214), Seq: 0, Ack: 201, Len: 16
> > Data (16 bytes)
> >
> > 0000 38 8a 95 e7 71 f0 c7 88 db 7b 0d 29 0e 93 6a 02 8...q....{.)..j.
> >
> > No. Time Source Destination Protocol Info
> > 3 0.017261 87.4.92.27 255.255.255.255 CUPS
> > ipp://Contec:631/printers/printer (idle)
> >
> > Frame 3 (104 bytes on wire, 104 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 255.255.255.255
> > (255.255.255.255)
> > User Datagram Protocol, Src Port: ipp (631), Dst Port: ipp (631)
> > Common Unix Printing System (CUPS) Browsing Protocol
> >
> > No. Time Source Destination Protocol Info
> > 4 0.346590 218.219.30.89 87.4.92.27 TCP
> > 35214 > 1238 [PSH, ACK] Seq=201 Ack=16 Win=64601 Len=274
> >
> > Frame 4 (336 bytes on wire, 336 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 218.219.30.89 (218.219.30.89), Dst: 87.4.92.27
> > (87.4.92.27)
> > Transmission Control Protocol, Src Port: 35214 (35214), Dst Port: 1238
> > (1238), Seq: 201, Ack: 16, Len: 274
> > Data (274 bytes)
> >
> > 0000 11 61 35 c4 1f 05 ab 9a 92 06 30 59 8a fc bb 0b .a5.......0Y....
> > 0010 2d 5f c0 a5 0f 2e 62 d1 5c f3 39 00 a5 53 26 55 -_....b.\.9..S&U
> > 0020 e5 6b b6 36 66 78 86 2c ed 4c 96 a5 33 7d c2 da .k.6fx.,.L..3}..
> > 0030 9a be 50 28 00 2f e4 e3 39 15 40 b7 5d 08 91 f2 ..P(./..9. at .]...
> > 0040 d2 47 6a ad c5 7d d6 2b 55 a6 2d a2 a2 c6 85 b2 .Gj..}.+U.-.....
> > 0050 99 6c 9d 6d 50 ff 62 cd e5 d7 9b 2f 39 bf a4 50 .l.mP.b..../9..P
> > 0060 76 bb 05 eb 7e f7 d4 f8 81 98 2a 48 4a dd 34 60 v...~.....*HJ.4`
> > 0070 0d ee bc bc e5 42 e3 47 49 12 09 f7 53 18 b1 62 .....B.GI...S..b
> > 0080 44 72 86 50 e3 bc 10 19 fa 09 e5 f0 32 ed a3 88 Dr.P........2...
> > 0090 8a fd f5 32 19 53 3e f2 a4 f8 f7 25 28 2e e5 8d ...2.S>....%(...
> > 00a0 e7 f9 47 f7 c4 b7 83 b2 8e aa 38 57 66 09 52 06 ..G.......8Wf.R.
> > 00b0 b8 d9 54 e3 b2 c8 01 bf fa f0 86 b2 6f 5b 99 c6 ..T.........o[..
> > 00c0 ba b7 8d b7 bd 2a c9 44 c4 ab 22 e6 c7 c5 33 47 .....*.D.."...3G
> > 00d0 a3 34 10 c3 73 86 57 c5 c8 4c c7 7f e4 a8 86 f4 .4..s.W..L......
> > 00e0 eb 1e a7 1b 70 69 ab 15 2d 1a 39 18 6c 01 dc f6 ....pi..-.9.l...
> > 00f0 c6 3a 88 96 aa 90 fb de ff 09 20 ef ac 3b 86 be .:........ ..;..
> > 0100 6c e9 e0 42 d5 6c fb 77 a7 cc 09 43 38 4c 7c 95 l..B.l.w...C8L|.
> > 0110 62 74 bt
> >
> > No. Time Source Destination Protocol Info
> > 5 0.453008 87.4.92.27 218.219.30.89 TCP
> > 1238 > 35214 [ACK] Seq=16 Ack=475 Win=16331 Len=0
> >
> > Frame 5 (62 bytes on wire, 62 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 218.219.30.89
> > (218.219.30.89)
> > Transmission Control Protocol, Src Port: 1238 (1238), Dst Port: 35214
> > (35214), Seq: 16, Ack: 475, Len: 0
> >
> > No. Time Source Destination Protocol Info
> > 6 1.300864 87.4.184.241 87.4.92.27 TCP
> > 1302 > 135 [SYN] Seq=0 Ack=0 Win=53760 Len=0 MSS=1414 WS=3 TSV=0
> > TSER=0
> >
> > Frame 6 (86 bytes on wire, 86 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.184.241 (87.4.184.241), Dst: 87.4.92.27
> > (87.4.92.27)
> > Transmission Control Protocol, Src Port: 1302 (1302), Dst Port: 135
> > (135), Seq: 0, Ack: 0, Len: 0
> >
> > No. Time Source Destination Protocol Info
> > 7 2.821787 218.219.30.89 87.4.92.27 TCP
> > 35214 > 1238 [PSH, ACK] Seq=475 Ack=16 Win=64601 Len=138
> >
> > Frame 7 (200 bytes on wire, 200 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 218.219.30.89 (218.219.30.89), Dst: 87.4.92.27
> > (87.4.92.27)
> > Transmission Control Protocol, Src Port: 35214 (35214), Dst Port: 1238
> > (1238), Seq: 475, Ack: 16, Len: 138
> > Data (138 bytes)
> >
> > 0000 1d 15 33 20 01 33 f6 51 34 aa 9d 48 3b 74 57 fd ..3 .3.Q4..H;tW.
> > 0010 c5 e7 35 73 31 73 6f 0c da d6 97 63 5d 3e 49 8d ..5s1so....c]>I.
> > 0020 c3 26 43 96 cb be d0 d8 24 fd fa 49 78 bd 12 b3 .&C.....$..Ix...
> > 0030 8a 5c cf 42 8b 7a a0 5e 2f 22 c2 9c 51 3d 2d 48 .\.B.z.^/"..Q=-H
> > 0040 82 5a ba 12 1d 48 fe 67 39 50 dc b3 23 e3 31 14 .Z...H.g9P..#.1.
> > 0050 3a b0 16 79 b9 99 5c 1e 37 ce 3d 36 d2 e2 9b 4d :..y..\.7.=6...M
> > 0060 60 43 ea 91 e5 27 06 6d 91 61 84 38 45 6a 3a 14 `C...'.m.a.8Ej:.
> > 0070 12 0d 1c 7d 05 20 33 d1 39 a5 72 a6 44 d4 6a d8 ...}. 3.9.r.D.j.
> > 0080 60 2c e5 2d dc c4 6d aa 0b c4 `,.-..m...
> >
> > No. Time Source Destination Protocol Info
> > 8 2.824523 87.4.92.27 218.219.30.89 TCP
> > 1238 > 35214 [PSH, ACK] Seq=16 Ack=613 Win=16193 Len=4
> >
> > Frame 8 (66 bytes on wire, 66 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 218.219.30.89
> > (218.219.30.89)
> > Transmission Control Protocol, Src Port: 1238 (1238), Dst Port: 35214
> > (35214), Seq: 16, Ack: 613, Len: 4
> > Data (4 bytes)
> >
> > 0000 43 25 0b fd C%..
> >
> > No. Time Source Destination Protocol Info
> > 9 3.313175 218.219.30.89 87.4.92.27 TCP
> > 35214 > 1238 [ACK] Seq=613 Ack=20 Win=64597 Len=0
> >
> > Frame 9 (68 bytes on wire, 68 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 218.219.30.89 (218.219.30.89), Dst: 87.4.92.27
> > (87.4.92.27)
> > Transmission Control Protocol, Src Port: 35214 (35214), Dst Port: 1238
> > (1238), Seq: 613, Ack: 20, Len: 0
> >
> > No. Time Source Destination Protocol Info
> > 10 4.264879 87.4.184.241 87.4.92.27 TCP
> > 1302 > 135 [SYN] Seq=0 Ack=0 Win=430080 Len=0 MSS=1414 WS=3 TSV=0
> > TSER=0
> >
> > Frame 10 (86 bytes on wire, 86 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.184.241 (87.4.184.241), Dst: 87.4.92.27
> > (87.4.92.27)
> > Transmission Control Protocol, Src Port: 1302 (1302), Dst Port: 135
> > (135), Seq: 0, Ack: 0, Len: 0
> >
> > No. Time Source Destination Protocol Info
> > 11 6.545830 87.4.92.27 218.219.30.89 UDP
> > Source port: 44165 Destination port: 35214
> >
> > Frame 11 (150 bytes on wire, 150 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 218.219.30.89
> > (218.219.30.89)
> > User Datagram Protocol, Src Port: 44165 (44165), Dst Port: 35214 (35214)
> > Data (100 bytes)
> >
> > 0000 c5 4b 02 f9 ed fa 28 25 61 70 43 94 32 1a aa d3 .K....(%apC.2...
> > 0010 f5 87 c4 20 d9 0a d2 f8 18 5c c8 dc bb 0f 96 7d ... .....\.....}
> > 0020 bb 59 17 fd 87 56 62 77 50 0c c2 fa 80 e6 5b d7 .Y...VbwP.....[.
> > 0030 80 3a b7 06 0f 93 9f c9 5e 8d 18 a0 9a 17 4e 44 .:......^.....ND
> > 0040 b7 5d 17 bc 75 53 0a 76 ff 36 04 36 58 6a 47 33 .]..uS.v.6.6XjG3
> > 0050 30 33 93 dc a3 ae 58 d5 7b 80 9f 46 19 bd 0f 14 03....X.{..F....
> > 0060 ba 01 d6 5d ...]
> >
> > No. Time Source Destination Protocol Info
> > 12 8.573753 87.4.92.27 218.219.30.89 UDP
> > Source port: 44165 Destination port: 35214
> >
> > Frame 12 (150 bytes on wire, 150 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 218.219.30.89
> > (218.219.30.89)
> > User Datagram Protocol, Src Port: 44165 (44165), Dst Port: 35214 (35214)
> > Data (100 bytes)
> >
> > 0000 c5 4b 02 33 6d 9c 79 25 61 70 43 1b 87 0b 7c 99 .K.3m.y%apC...|.
> > 0010 20 de 4d 41 5f 52 70 b3 b5 ac b3 3d 83 22 5d dc .MA_Rp....=."].
> > 0020 cf 0c 68 8c 5b c3 e0 3d e2 f8 5b ec 5f 38 72 c6 ..h.[..=..[._8r.
> > 0030 d3 7d 43 3d 87 13 22 bb d3 a9 68 ce 38 c5 45 ac .}C=.."...h.8.E.
> > 0040 4f b4 d8 38 3b 63 1f ad 3d 29 4c d0 d2 b7 e3 1d O..8;c..=)L.....
> > 0050 04 ac 9a b9 3a 7e 05 3d e8 19 8f 7c e2 1b 43 a1 ....:~.=...|..C.
> > 0060 7b 9f 06 f1 {...
> >
> > No. Time Source Destination Protocol Info
> > 13 9.021233 87.4.92.27 255.255.255.255 CUPS
> > ipp://Contec:631/printers/HP_Celeron (idle)
> >
> > Frame 13 (203 bytes on wire, 203 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 255.255.255.255
> > (255.255.255.255)
> > User Datagram Protocol, Src Port: ipp (631), Dst Port: ipp (631)
> > Common Unix Printing System (CUPS) Browsing Protocol
> >
> > No. Time Source Destination Protocol Info
> > 14 12.621767 87.4.92.27 218.219.30.89 UDP
> > Source port: 44165 Destination port: 35214
> >
> > Frame 14 (150 bytes on wire, 150 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 218.219.30.89
> > (218.219.30.89)
> > User Datagram Protocol, Src Port: 44165 (44165), Dst Port: 35214 (35214)
> > Data (100 bytes)
> >
> > 0000 c5 4b 02 5c 31 b4 56 25 61 70 43 e6 69 fe 8d f8 .K.\1.V%apC.i...
> > 0010 27 d4 ba 78 79 e1 5e ad 7c ed 8f 3f 56 02 33 9d '..xy.^.|..?V.3.
> > 0020 23 02 d2 94 fc f8 e3 e8 29 51 7a 6b 57 41 6b ec #.......)QzkWAk.
> > 0030 f7 71 fc 9b 9e 46 19 61 f1 62 06 56 b8 02 58 33 .q...F.a.b.V..X3
> > 0040 5a 51 fb 4e 9f 12 c1 47 ef 39 31 0b fe cd 73 d8 ZQ.N...G.91...s.
> > 0050 f1 14 a1 4f fd 64 5f c4 56 59 11 b7 f4 00 7f 44 ...O.d_.VY.....D
> > 0060 38 1b 85 d1 8...
> >
> > No. Time Source Destination Protocol Info
> > 15 12.737203 87.4.234.37 87.4.92.27 TCP
> > 1145 > microsoft-ds [SYN] Seq=0 Ack=0 Win=53760 Len=0 MSS=1460 WS=3
> > TSV=0 TSER=0
> >
> > Frame 15 (86 bytes on wire, 86 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.234.37 (87.4.234.37), Dst: 87.4.92.27 (87.4.92.27)
> > Transmission Control Protocol, Src Port: 1145 (1145), Dst Port:
> > microsoft-ds (445), Seq: 0, Ack: 0, Len: 0
> > ----------------------------------------------------------------------------------------------------------------------------------
> >
> > This is the otput of wget --inet4-only
> > http://download.fedora.redhat.com/pub/fedora/linux/core/4/i386/os/repodata/repomd.xml
> > that was o.k.
> >
> > No. Time Source Destination Protocol Info
> > 1 0.000000 87.4.92.27 212.216.112.112 DNS
> > Standard query A download.fedora.redhat.com
> >
> > Frame 1 (94 bytes on wire, 94 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 212.216.112.112
> > (212.216.112.112)
> > User Datagram Protocol, Src Port: 32776 (32776), Dst Port: domain (53)
> > Domain Name System (query)
> >
> > No. Time Source Destination Protocol Info
> > 2 0.091685 212.216.112.112 87.4.92.27 DNS
> > Standard query response A 66.187.224.20 A 209.132.176.20 A
> > 209.132.176.220 A 209.132.176.221
> >
> > Frame 2 (260 bytes on wire, 260 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 212.216.112.112 (212.216.112.112), Dst:
> > 87.4.92.27 (87.4.92.27)
> > User Datagram Protocol, Src Port: domain (53), Dst Port: 32776 (32776)
> > Domain Name System (response)
> >
> > No. Time Source Destination Protocol Info
> > 3 0.093732 87.4.92.27 66.187.224.20 TCP
> > 35598 > http [SYN] Seq=0 Ack=0 Win=5808 Len=0 MSS=1412 TSV=501123
> > TSER=0 WS=2
> >
> > Frame 3 (82 bytes on wire, 82 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 66.187.224.20
> > (66.187.224.20)
> > Transmission Control Protocol, Src Port: 35598 (35598), Dst Port: http
> > (80), Seq: 0, Ack: 0, Len: 0
> >
> > No. Time Source Destination Protocol Info
> > 4 0.287018 66.187.224.20 87.4.92.27 TCP
> > http > 35598 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460
> > TSV=971646217 TSER=501123 WS=2
> >
> > Frame 4 (82 bytes on wire, 82 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 66.187.224.20 (66.187.224.20), Dst: 87.4.92.27
> > (87.4.92.27)
> > Transmission Control Protocol, Src Port: http (80), Dst Port: 35598
> > (35598), Seq: 0, Ack: 1, Len: 0
> >
> > No. Time Source Destination Protocol Info
> > 5 0.287544 87.4.92.27 66.187.224.20 TCP
> > 35598 > http [ACK] Seq=1 Ack=1 Win=5808 Len=0 TSV=501171
> > TSER=971646217
> >
> > Frame 5 (74 bytes on wire, 74 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 66.187.224.20
> > (66.187.224.20)
> > Transmission Control Protocol, Src Port: 35598 (35598), Dst Port: http
> > (80), Seq: 1, Ack: 1, Len: 0
> >
> > No. Time Source Destination Protocol Info
> > 6 0.288332 87.4.92.27 66.187.224.20 HTTP
> > GET /pub/fedora/linux/core/4/i386/os/repodata/repomd.xml HTTP/1.0
> >
> > Frame 6 (258 bytes on wire, 258 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 66.187.224.20
> > (66.187.224.20)
> > Transmission Control Protocol, Src Port: 35598 (35598), Dst Port: http
> > (80), Seq: 1, Ack: 1, Len: 184
> > Hypertext Transfer Protocol
> >
> > No. Time Source Destination Protocol Info
> > 7 0.489036 66.187.224.20 87.4.92.27 TCP
> > http > 35598 [ACK] Seq=1 Ack=185 Win=5792 Len=0 TSV=971646420
> > TSER=501171
> >
> > Frame 7 (74 bytes on wire, 74 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 66.187.224.20 (66.187.224.20), Dst: 87.4.92.27
> > (87.4.92.27)
> > Transmission Control Protocol, Src Port: http (80), Dst Port: 35598
> > (35598), Seq: 1, Ack: 185, Len: 0
> >
> > No. Time Source Destination Protocol Info
> > 8 0.490576 66.187.224.20 87.4.92.27 TCP
> > [TCP segment of a reassembled PDU]
> >
> > Frame 8 (415 bytes on wire, 415 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 66.187.224.20 (66.187.224.20), Dst: 87.4.92.27
> > (87.4.92.27)
> > Transmission Control Protocol, Src Port: http (80), Dst Port: 35598
> > (35598), Seq: 1, Ack: 185, Len: 341
> >
> > No. Time Source Destination Protocol Info
> > 9 0.491014 87.4.92.27 66.187.224.20 TCP
> > 35598 > http [ACK] Seq=185 Ack=342 Win=6880 Len=0 TSV=501222
> > TSER=971646420
> >
> > Frame 9 (74 bytes on wire, 74 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 66.187.224.20
> > (66.187.224.20)
> > Transmission Control Protocol, Src Port: 35598 (35598), Dst Port: http
> > (80), Seq: 185, Ack: 342, Len: 0
> >
> > No. Time Source Destination Protocol Info
> > 10 0.493578 66.187.224.20 87.4.92.27 HTTP
> > HTTP/1.1 200 OK
> >
> > Frame 10 (1214 bytes on wire, 1214 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 66.187.224.20 (66.187.224.20), Dst: 87.4.92.27
> > (87.4.92.27)
> > Transmission Control Protocol, Src Port: http (80), Dst Port: 35598
> > (35598), Seq: 342, Ack: 185, Len: 1140
> > Reassembled TCP Segments (1481 bytes): #8(341), #10(1140)
> > Hypertext Transfer Protocol
> > eXtensible Markup Language
> >
> > No. Time Source Destination Protocol Info
> > 11 0.494153 87.4.92.27 66.187.224.20 TCP
> > 35598 > http [ACK] Seq=185 Ack=1482 Win=9160 Len=0 TSV=501223
> > TSER=971646420
> >
> > Frame 11 (74 bytes on wire, 74 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 66.187.224.20
> > (66.187.224.20)
> > Transmission Control Protocol, Src Port: 35598 (35598), Dst Port: http
> > (80), Seq: 185, Ack: 1482, Len: 0
> >
> > No. Time Source Destination Protocol Info
> > 12 0.554566 87.4.92.27 66.187.224.20 TCP
> > 35598 > http [FIN, ACK] Seq=185 Ack=1482 Win=9160 Len=0 TSV=501238
> > TSER=971646420
> >
> > Frame 12 (74 bytes on wire, 74 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 66.187.224.20
> > (66.187.224.20)
> > Transmission Control Protocol, Src Port: 35598 (35598), Dst Port: http
> > (80), Seq: 185, Ack: 1482, Len: 0
> >
> > No. Time Source Destination Protocol Info
> > 13 0.746015 66.187.224.20 87.4.92.27 TCP
> > http > 35598 [FIN, ACK] Seq=1482 Ack=186 Win=5792 Len=0 TSV=971646677
> > TSER=501238
> >
> > Frame 13 (74 bytes on wire, 74 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 66.187.224.20 (66.187.224.20), Dst: 87.4.92.27
> > (87.4.92.27)
> > Transmission Control Protocol, Src Port: http (80), Dst Port: 35598
> > (35598), Seq: 1482, Ack: 186, Len: 0
> >
> > No. Time Source Destination Protocol Info
> > 14 0.746535 87.4.92.27 66.187.224.20 TCP
> > 35598 > http [ACK] Seq=186 Ack=1483 Win=9160 Len=0 TSV=501286
> > TSER=971646677
> >
> > Frame 14 (74 bytes on wire, 74 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 66.187.224.20
> > (66.187.224.20)
> > Transmission Control Protocol, Src Port: 35598 (35598), Dst Port: http
> > (80), Seq: 186, Ack: 1483, Len: 0
> >
> > No. Time Source Destination Protocol Info
> > 15 5.528412 EdimaxTe_1e:b9:51 Cisco_09:00:aa PPP LCP
> > Echo Request
> >
> > Frame 15 (30 bytes on wire, 30 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > PPP Link Control Protocol
> >
> > No. Time Source Destination Protocol Info
> > 16 5.577832 Cisco_09:00:aa EdimaxTe_1e:b9:51 PPP LCP
> > Echo Reply
> >
> > Frame 16 (60 bytes on wire, 60 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > PPP Link Control Protocol
> >
> > No. Time Source Destination Protocol Info
> > 17 12.720364 87.4.92.27 255.255.255.255 CUPS
> > ipp://Contec:631/printers/Epson915 (idle)
> >
> > Frame 17 (193 bytes on wire, 193 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 255.255.255.255
> > (255.255.255.255)
> > User Datagram Protocol, Src Port: ipp (631), Dst Port: ipp (631)
> > Common Unix Printing System (CUPS) Browsing Protocol
> >
> > No. Time Source Destination Protocol Info
> > 18 13.712727 87.4.92.27 255.255.255.255 CUPS
> > ipp://Contec:631/printers/HP_Celeron (idle)
> >
> > Frame 18 (203 bytes on wire, 203 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 255.255.255.255
> > (255.255.255.255)
> > User Datagram Protocol, Src Port: ipp (631), Dst Port: ipp (631)
> > Common Unix Printing System (CUPS) Browsing Protocol
> >
> > No. Time Source Destination Protocol Info
> > 19 14.712935 87.4.92.27 255.255.255.255 CUPS
> > ipp://Contec:631/printers/printer (idle)
> >
> > Frame 19 (104 bytes on wire, 104 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 255.255.255.255
> > (255.255.255.255)
> > User Datagram Protocol, Src Port: ipp (631), Dst Port: ipp (631)
> > Common Unix Printing System (CUPS) Browsing Protocol
> > ------------------------------------------------------------------------------------------------------------------------------
> >
> > I attach also the ethereal files...
>
>
> Antonio,
>
Some clarifications:
> Some questions and thoughts.
>
> One thing I haven't noticed over the email threads: Are any related
> messages appearing in /var/log/messages, /var/log/audit/*,
> or /var/log/secure?
>
> What happens if you do a yum clean all? Then try running yum update.
> That should not fix your problem, but it cannot hurt.
Already done: no improvement
>
> Also, is SELinux enabled? If so, try turning it off. selinux=0
> appended to the boot command in GRUB.
>
No, SELinux is not enabled
__________________________________________________________________________
> Can you turn off iptables (service iptables stop) and try yum again.
As it is a router, I assume that I can't stop iptables: and in any
case it doesn't explain different behaviour of wget if flagged or not
> Also post the output of iptables -L.
___________________________________________________________________________
Generated by iptables-save v1.2.6a on Fri Feb 21 09:27:33 2003
*nat
:OUTPUT ACCEPT [0:0]
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -s 192.168.0.0/24 -o ppp0 -j MASQUERADE
# Forward HTTP connections to Squid proxy
-A PREROUTING -p tcp -m tcp -i eth0 --dport 80 -j REDIRECT --to-ports 3128
COMMIT
# Completed on Fri Feb 21 09:27:33 2003
# Generated by iptables-save v1.2.6a on Fri Feb 21 09:27:33 2003
*mangle
:PREROUTING ACCEPT [9:432]
:INPUT ACCEPT [3:234]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [9:684]
:POSTROUTING ACCEPT [17:1292]
COMMIT
# Completed on Fri Feb 21 09:27:33 2003
# Generated by iptables-save v1.2.6a on Fri Feb 21 09:27:33 2003
*filter
:FORWARD DROP [0:0]
:INPUT DROP [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i eth0 -j ACCEPT
-A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -i eth0 -j ACCEPT
COMMIT
# Completed on Fri Feb 21 09:27:33 2003
>
> Maybe unrelated: In the above network traffic, what is the port 1238
> traffic to/from user89-net218219030.ayu.ne.jp? UDP port 1238 is defined
> as hacl-qs, but I cannot find what it does. Take a look at netstat -n |
> grep 1238.
I will check tomorrow morning, now I am at home, so server is out of
my reach :-)
>
> I took a quick look at the attached ethereal data. There does not seem
> to be any traffic to your DNS server or to redhat, for testfailed. This
> sure points to some kind of proxy running on the same box. Try ethereal
> on the lo interface.
>
yes, there is no traffic to redhat, if I use wget with no flag or yum,
but traffic is existing with flagged wget
> One other thought: Try stopping mDNSResponder (service mDNSResponder
> stop).
>
I will try it: I do not understand why mDNS should be a problem with
no-flag wget (and yum), otherwise it is o.k.
>
>
I have a doubt to have upgraded some part with some extra repository
causing this weirdness...but how can I check??
Tnx for assistance
--
Antonio Montagnani
Skype : antoniomontag
More information about the fedora-list
mailing list