Subject: kern/28311: ipf fr_tcpinwindow kills locally generated tcp streams
To: None <kern-bug-people@netbsd.org, gnats-admin@netbsd.org,>
From: Frank Kardel <kardel@pip.acrys.com>
List: netbsd-bugs
Date: 11/14/2004 08:32:00
>Number: 28311
>Category: kern
>Synopsis: smtp onnections to www.ntp.org are killed with EACCES due to fr_tcpinwindow check
>Confidential: no
>Severity: critical
>Priority: high
>Responsible: kern-bug-people
>State: open
>Class: sw-bug
>Submitter-Id: net
>Arrival-Date: Sun Nov 14 08:32:00 +0000 2004
>Originator: Frank Kardel
>Release: NetBSD 2.99.10 - current-20041113-091603
>Organization:
>Environment:
System: NetBSD xxx.yyyyyy.zzzz 2.99.10 NetBSD 2.99.10 (PIP_ISDN) #0: Sat Nov 13 20:33:01 MET 2004 kardel@xxx.yyyyyy.zzzz:/src/NetBSD/netbsd/sys/arch/i386/compile/obj.i386/PIP_ISDN i386
Architecture: i386
Machine: i386
>Description:
Currently no mail can be send to www.ntp.org as the connections are dropped during
te sendmail data phase with EACCES from ipfilter. Filter rules are set up
to keep state with outgoing connections. After a while the
OOW check hit the connection for pakets being sent and sendmail terminates
during its putbody() phase.
Running /var/spool/mqueue/iAE6iwwm010431 (sequence 1 of 1)
<kardel@ntp.org>... Connecting to mail.ntp.org. via esmtp...
220 maccarony.ntp.org ESMTP Postfix
>>> EHLO pip.kardel.name
250-maccarony.ntp.org
250-PIPELINING
250-SIZE 10240000
250-ETRN
250 8BITMIME
>>> MAIL From:<xxxxxx@yyy.zzz> SIZE=103151
250 Ok
>>> RCPT To:<xxxxxx@yyy.zzz>
>>> DATA
250 Ok
354 End data with <CR><LF>.<CR><LF>
putbody: write error
I/O error
Closing connection to mail.ntp.org.
The respective (shortened) ktrace from sendmail looke like this:
10200 ktrace EMUL "netbsd"
10200 ktrace CALL execve(0xbfbfe110,0xbfbfe5e0,0xbfbfe5f0)
10200 ktrace NAMI "/sbin/sendmail"
...
10200 sendmail CALL select(8,0xbfbf8e80,0,0xbfbf8e60,0xbfbf8e58)
10200 sendmail RET select 1
10200 sendmail CALL gettimeofday(0xbfbf8e48,0)
10200 sendmail RET gettimeofday 0
10200 sendmail CALL read(7,0x8142000,0x1000)
10200 sendmail GIO fd 7 read 37 bytes
"220 maccarony.ntp.org ESMTP Post"
10200 sendmail RET read 37/0x25
10200 sendmail CALL gettimeofday(0xbfbf8f08,0)
10200 sendmail RET gettimeofday 0
10200 sendmail CALL write(1,0x8133000,0x24)
10200 sendmail GIO fd 1 wrote 36 bytes
"220 maccarony.ntp.org ESMTP Post"
10200 sendmail RET write 36/0x24
10200 sendmail CALL write(1,0x8133000,0x19)
10200 sendmail GIO fd 1 wrote 25 bytes
">>> EHLO xxx.yyyyyy.zzzz
"
10200 sendmail RET write 25/0x19
10200 sendmail CALL __fstat13(6,0xbfbf9ca0)
10200 sendmail RET __fstat13 0
10200 sendmail CALL fcntl(6,3,0)
10200 sendmail RET fcntl 6
10200 sendmail CALL fcntl(6,4,2)
10200 sendmail RET fcntl 0
10200 sendmail CALL write(6,0x8143000,0x16)
10200 sendmail GIO fd 6 wrote 22 bytes
"EHLO xxx.yyyyyy.zzzz\r
"
10200 sendmail RET write 22/0x16
10200 sendmail CALL fcntl(7,3,0)
10200 sendmail RET fcntl 2
10200 sendmail CALL fcntl(7,4,6)
10200 sendmail RET fcntl 0
10200 sendmail CALL read(7,0x8142000,0x1000)
10200 sendmail RET read -1 errno 35 Resource temporarily unavailable
10200 sendmail CALL gettimeofday(0xbfbf8e50,0)
10200 sendmail RET gettimeofday 0
10200 sendmail CALL select(8,0xbfbf8e80,0,0xbfbf8e60,0xbfbf8e58)
10200 sendmail RET select 1
10200 sendmail CALL gettimeofday(0xbfbf8e48,0)
10200 sendmail RET gettimeofday 0
10200 sendmail CALL read(7,0x8142000,0x1000)
10200 sendmail GIO fd 7 read 82 bytes
"250-maccarony.ntp.org\r
250-PIPEL"
10200 sendmail RET read 82/0x52
10200 sendmail CALL gettimeofday(0xbfbf8f08,0)
10200 sendmail RET gettimeofday 0
10200 sendmail CALL write(1,0x8133000,0x16)
10200 sendmail GIO fd 1 wrote 22 bytes
"250-maccarony.ntp.org
"
10200 sendmail RET write 22/0x16
10200 sendmail CALL fcntl(6,3,0)
10200 sendmail RET fcntl 6
10200 sendmail CALL fcntl(6,4,2)
10200 sendmail RET fcntl 0
10200 sendmail CALL gettimeofday(0xbfbf8f08,0)
10200 sendmail RET gettimeofday 0
10200 sendmail CALL write(1,0x8133000,0xf)
10200 sendmail GIO fd 1 wrote 15 bytes
"250-PIPELINING
"
10200 sendmail RET write 15/0xf
10200 sendmail CALL gettimeofday(0xbfbf8f08,0)
10200 sendmail RET gettimeofday 0
10200 sendmail CALL write(1,0x8133000,0x12)
10200 sendmail GIO fd 1 wrote 18 bytes
"250-SIZE 10240000
"
10200 sendmail RET write 18/0x12
10200 sendmail CALL gettimeofday(0xbfbf8f08,0)
10200 sendmail RET gettimeofday 0
10200 sendmail CALL write(1,0x8133000,9)
10200 sendmail GIO fd 1 wrote 9 bytes
"250-ETRN
"
10200 sendmail RET write 9
10200 sendmail CALL gettimeofday(0xbfbf8f08,0)
10200 sendmail RET gettimeofday 0
10200 sendmail CALL write(1,0x8133000,0xd)
10200 sendmail GIO fd 1 wrote 13 bytes
"250 8BITMIME
"
10200 sendmail RET write 13/0xd
10200 sendmail CALL __stat13(0xbfbf1fd0,0xbfbf28e0)
10200 sendmail NAMI "/etc/mail/access.db"
10200 sendmail RET __stat13 -1 errno 2 No such file or directory
10200 sendmail CALL __lstat13(0xbfbe9f70,0xbfbe9f10)
10200 sendmail NAMI "/"
10200 sendmail RET __lstat13 0
10200 sendmail CALL geteuid
10200 sendmail RET geteuid 0
10200 sendmail CALL __lstat13(0xbfbe9f70,0xbfbe9f10)
10200 sendmail NAMI "/etc"
10200 sendmail RET __lstat13 0
10200 sendmail CALL geteuid
10200 sendmail RET geteuid 0
10200 sendmail CALL __lstat13(0xbfbe9f70,0xbfbe9f10)
10200 sendmail NAMI "/etc/mail"
10200 sendmail RET __lstat13 0
10200 sendmail CALL geteuid
10200 sendmail RET geteuid 0
10200 sendmail CALL write(1,0x8133000,0x2b)
10200 sendmail GIO fd 1 wrote 43 bytes
">>> MAIL From:<xxxxxx@yyy.zzz> S"
10200 sendmail RET write 43/0x2b
10200 sendmail CALL write(6,0x8143000,0x28)
10200 sendmail GIO fd 6 wrote 40 bytes
"MAIL From:<xxxxxx@yyy.zzz> SIZE="
10200 sendmail RET write 40/0x28
10200 sendmail CALL fcntl(7,3,0)
10200 sendmail RET fcntl 2
10200 sendmail CALL fcntl(7,4,6)
10200 sendmail RET fcntl 0
10200 sendmail CALL read(7,0x8142000,0x1000)
10200 sendmail RET read -1 errno 35 Resource temporarily unavailable
10200 sendmail CALL gettimeofday(0xbfbf8530,0)
10200 sendmail RET gettimeofday 0
10200 sendmail CALL select(8,0xbfbf8560,0,0xbfbf8540,0xbfbf8538)
10200 sendmail RET select 1
10200 sendmail CALL gettimeofday(0xbfbf8528,0)
10200 sendmail RET gettimeofday 0
10200 sendmail CALL read(7,0x8142000,0x1000)
10200 sendmail GIO fd 7 read 8 bytes
"250 Ok\r
"
10200 sendmail RET read 8
10200 sendmail CALL gettimeofday(0xbfbf85e8,0)
10200 sendmail RET gettimeofday 0
10200 sendmail CALL write(1,0x8133000,7)
10200 sendmail GIO fd 1 wrote 7 bytes
"250 Ok
"
10200 sendmail RET write 7
10200 sendmail CALL gettimeofday(0xbfbec998,0)
10200 sendmail RET gettimeofday 0
10200 sendmail CALL write(1,0x8133000,0x1d)
10200 sendmail GIO fd 1 wrote 29 bytes
">>> RCPT To:<xxxxxx@yyy.zzz>
"
10200 sendmail RET write 29/0x1d
10200 sendmail CALL fcntl(6,3,0)
10200 sendmail RET fcntl 6
10200 sendmail CALL fcntl(6,4,2)
10200 sendmail RET fcntl 0
10200 sendmail CALL write(1,0x8133000,9)
10200 sendmail GIO fd 1 wrote 9 bytes
">>> DATA
"
10200 sendmail RET write 9
10200 sendmail CALL write(6,0x8143000,0x20)
10200 sendmail GIO fd 6 wrote 32 bytes
"RCPT To:<xxxxxx@yyy.zzz>\r
DATA\r
"
10200 sendmail RET write 32/0x20
10200 sendmail CALL fcntl(7,3,0)
10200 sendmail RET fcntl 2
10200 sendmail CALL fcntl(7,4,6)
10200 sendmail RET fcntl 0
10200 sendmail CALL read(7,0x8142000,0x1000)
10200 sendmail RET read -1 errno 35 Resource temporarily unavailable
10200 sendmail CALL gettimeofday(0xbfbf8e00,0)
10200 sendmail RET gettimeofday 0
10200 sendmail CALL select(8,0xbfbf8e30,0,0xbfbf8e10,0xbfbf8e08)
10200 sendmail RET select 1
10200 sendmail CALL gettimeofday(0xbfbf8df8,0)
10200 sendmail RET gettimeofday 0
10200 sendmail CALL read(7,0x8142000,0x1000)
10200 sendmail GIO fd 7 read 45 bytes
"250 Ok\r
354 End data with <CR><L"
10200 sendmail RET read 45/0x2d
10200 sendmail CALL gettimeofday(0xbfbf8eb8,0)
10200 sendmail RET gettimeofday 0
10200 sendmail CALL write(1,0x8133000,7)
10200 sendmail GIO fd 1 wrote 7 bytes
"250 Ok
"
10200 sendmail RET write 7
10200 sendmail CALL fcntl(6,3,0)
10200 sendmail RET fcntl 6
10200 sendmail CALL fcntl(6,4,2)
10200 sendmail RET fcntl 0
10200 sendmail CALL gettimeofday(0xbfbf8ee8,0)
10200 sendmail RET gettimeofday 0
10200 sendmail CALL write(1,0x8133000,0x24)
10200 sendmail GIO fd 1 wrote 36 bytes
"354 End data with <CR><LF>.<CR><"
10200 sendmail RET write 36/0x24
10200 sendmail CALL __sigprocmask14(0,0,0x80e4bd8)
10200 sendmail RET __sigprocmask14 0
10200 sendmail CALL __sigprocmask14(1,0xbfbf9ed0,0xbfbf9ec0)
10200 sendmail RET __sigprocmask14 0
10200 sendmail CALL gettimeofday(0xbfbf9f20,0)
10200 sendmail RET gettimeofday 0
10200 sendmail CALL getpid
10200 sendmail RET getpid 10200/0x27d8, 8353/0x20a1
10200 sendmail CALL __sigaction_sigtramp(0xe,0xbfbf9ed0,0xbfbf9eb0,0x48272b00,1)
10200 sendmail RET __sigaction_sigtramp 0
10200 sendmail CALL setitimer(0,0xbfbf9f30,0)
10200 sendmail RET setitimer 0
10200 sendmail CALL __sigprocmask14(2,0xbfbf9ed0,0xbfbf9ec0)
10200 sendmail RET __sigprocmask14 0
10200 sendmail CALL gettimeofday(0xbfbf19b8,0)
10200 sendmail RET gettimeofday 0
10200 sendmail CALL gettimeofday(0xbfbf19b8,0)
10200 sendmail RET gettimeofday 0
10200 sendmail CALL __fstat13(5,0xbfbf9490)
10200 sendmail RET __fstat13 0
10200 sendmail CALL lseek(5,0,0,0,1)
10200 sendmail RET lseek 0
10200 sendmail CALL lseek(5,0,0,0,0)
10200 sendmail RET lseek 0
10200 sendmail CALL read(5,0x8144000,0x4000)
10200 sendmail GIO fd 5 read 4088 bytes
"This is a multi-part message in "
10200 sendmail GIO fd 5 read 4088 bytes
"y9WyG5ph0eTjYTcGQpFZ
qwG7cxC11Ca"
10200 sendmail GIO fd 5 read 4088 bytes
"Fpc811xmEQEX9MTMYAFA
AZEQ1FRM85T"
10200 sendmail GIO fd 5 read 4088 bytes
"hCL7rvlB5IAERMjM4OqI
iIDAooWJf/f"
10200 sendmail GIO fd 5 read 32 bytes
"/93fPL+66kKTp2nc70+n
UsYZCAihZit"
10200 sendmail RET read 16384/0x4000
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail GIO fd 6 wrote 4088 bytes
"Received: from [10.0.3.1] (pip ["
10200 sendmail GIO fd 6 wrote 8 bytes
"60706090"
10200 sendmail RET write 4096/0x1000
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail GIO fd 6 wrote 4088 bytes
"007\r
Content-Type: text/plain; c"
10200 sendmail GIO fd 6 wrote 8 bytes
"IHB2bVAi"
10200 sendmail RET write 4096/0x1000
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail GIO fd 6 wrote 4088 bytes
"G9e/bjrhnI6Ht69y+MR8cl8VSkUI7epn"
10200 sendmail GIO fd 6 wrote 8 bytes
"DHKcpdQn"
10200 sendmail RET write 4096/0x1000
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail GIO fd 6 wrote 4088 bytes
"J6jSLSAjBVM2x\r
ayLGeDxOCU0gtE062"
10200 sendmail GIO fd 6 wrote 8 bytes
"zGNu+5W0"
10200 sendmail RET write 4096/0x1000
10200 sendmail CALL read(5,0x8144000,0x4000)
10200 sendmail GIO fd 5 read 4088 bytes
"TbYPvpVOVtokUEBDydFB0rXKanELQ6rn"
10200 sendmail GIO fd 5 read 4088 bytes
"//Orhg6ePVv3duTS0er7L1zkez974/uv"
10200 sendmail GIO fd 5 read 4088 bytes
"7BOAKB8IqkXlgRnV1d7UIrGSsihzo9bf"
10200 sendmail GIO fd 5 read 4088 bytes
"z07FIM0uyg+DG4M7kRIEOkSYkcEQPBuC"
10200 sendmail GIO fd 5 read 32 bytes
"AyE3dBhPJxXZjvthl3Zbtbtout+N2J7n"
10200 sendmail RET read 16384/0x4000
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail GIO fd 6 wrote 4088 bytes
"e1U8J6XIzoAE1fLbadMtmnsgzp7Y9HY+"
10200 sendmail GIO fd 6 wrote 8 bytes
"8/UZVw+3"
10200 sendmail RET write 4096/0x1000
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail GIO fd 6 wrote 4088 bytes
"V4+Tc0RIhuWb7540DanzVxTMmq6rol92"
10200 sendmail GIO fd 6 wrote 8 bytes
"TXKw76WO"
10200 sendmail RET write 4096/0x1000
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail GIO fd 6 wrote 4088 bytes
"MFBVj56UQ\r
OKOjsYG7Hao/IGrQxYAdB"
10200 sendmail GIO fd 6 wrote 8 bytes
"pxZDm3fx"
10200 sendmail RET write 4096/0x1000
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail GIO fd 6 wrote 4088 bytes
"otji/0YYwLp89vL/tT986ees9qOMwDMP"
10200 sendmail GIO fd 6 wrote 8 bytes
"tQhM1EA4"
10200 sendmail RET write 4096/0x1000
10200 sendmail CALL read(5,0x8144000,0x4000)
10200 sendmail GIO fd 5 read 4088 bytes
"stntOyU1NKmhWLQR2cOUcJnXuCiaq
5j"
10200 sendmail GIO fd 5 read 4088 bytes
"LZrr3JpjMLUcffUBcdENNJzJz2wlS
BC"
10200 sendmail GIO fd 5 read 4088 bytes
"eTSpFfZoaMiukI1TFvIkCGVUYRRFx
lW"
10200 sendmail GIO fd 5 read 4088 bytes
"Ba6AJFpZCBKUk4TtWkrVdAqK6saQy
Ie"
10200 sendmail GIO fd 5 read 32 bytes
"cMpfD5d2A14J/gGYhiS6QWehnwUs8
F4"
10200 sendmail RET read 16384/0x4000
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail GIO fd 6 wrote 4088 bytes
"P9gP1RRQAeO5mpVtZqLiIK7miOYYkQ3\r"
10200 sendmail GIO fd 6 wrote 8 bytes
"RB6AZiA0"
10200 sendmail RET write 4096/0x1000
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail GIO fd 6 wrote 4088 bytes
"eqFDM\r
O1Vkr47KZAWbqUy6n6Z5kjZJa"
10200 sendmail GIO fd 6 wrote 8 bytes
"fXdrESjy"
10200 sendmail RET write 4096/0x1000
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail GIO fd 6 wrote 4088 bytes
"gD8REiSxKDtQ0XbXhPKy8enK128/JFCD"
10200 sendmail GIO fd 6 wrote 8 bytes
"qVKVCCkq"
10200 sendmail RET write 4096/0x1000
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail GIO fd 6 wrote 4088 bytes
"Phud3Z+9fLzy3m6ffdqXU6ZSdWx\r
HPt"
10200 sendmail GIO fd 6 wrote 8 bytes
"JCClVIJU"
10200 sendmail RET write 4096/0x1000
10200 sendmail CALL read(5,0x8144000,0x4000)
10200 sendmail GIO fd 5 read 4088 bytes
"aVuyXsNt1PeuvcaWd6l5xGhzDNXXGxV4"
10200 sendmail GIO fd 5 read 4088 bytes
"HkkncQ0IJaOmAI2ZoAPlvx1mBGSonQfD"
10200 sendmail GIO fd 5 read 4088 bytes
"8+evn64eN7/Prd56xZDKD8PDsNQI05en"
10200 sendmail GIO fd 5 read 4088 bytes
"OwUMe53VZlZ9tvRPy21jWW3HzdPnOyl
"
10200 sendmail GIO fd 5 read 32 bytes
"VIWbWaMdrZ6EG3kiNoggovLCZGZsJrF
"
10200 sendmail RET read 16384/0x4000
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail GIO fd 6 wrote 4088 bytes
"K\r
yWS8lkk/W2aYSSYJgWgSMqEoChBUN"
10200 sendmail GIO fd 6 wrote 8 bytes
"6e9I9L3e"
10200 sendmail RET write 4096/0x1000
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail GIO fd 6 wrote 4088 bytes
"XFzksLCBbahp5mQ5OmmMbbu6UV806J2t"
10200 sendmail GIO fd 6 wrote 8 bytes
"Ylx+r6hc"
10200 sendmail RET write 4096/0x1000
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail GIO fd 6 wrote 4088 bytes
"ktvds/pnk+3x5u5+Toq99N5\r
8/W2hZx"
10200 sendmail GIO fd 6 wrote 8 bytes
"6LnAqWXg"
10200 sendmail RET write 4096/0x1000
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail GIO fd 6 wrote 4088 bytes
"1FHw0eFsPuvde5u/4kdP6LFZ4+hacXqf"
10200 sendmail GIO fd 6 wrote 8 bytes
"d615hHfC"
10200 sendmail RET write 4096/0x1000
10200 sendmail CALL read(5,0x8144000,0x4000)
10200 sendmail GIO fd 5 read 4088 bytes
"ZU/boFrd1Ferc7N92W8X3RVCCJaUQeiX"
10200 sendmail GIO fd 5 read 4088 bytes
"OEA+lHhys9muNz35H3zza6/+3iur5fLB"
10200 sendmail GIO fd 5 read 4088 bytes
"CA4LhJAqN1YJEDg8HMxwdzOZxA9BxMlj"
10200 sendmail GIO fd 5 read 4088 bytes
"wY7Rt1iwYmMmqsSEinv9jbe+/q23Hz/+"
10200 sendmail GIO fd 5 read 32 bytes
"m0fX+57LUG77D0vkTx/fBtZSQqvt+/76"
10200 sendmail RET read 16384/0x4000
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail GIO fd 6 wrote 4088 bytes
"5+c9CEyUch7H\r
obUgYqKURc5WywiQCJ"
10200 sendmail GIO fd 6 wrote 8 bytes
"1JEedkKP"
10200 sendmail RET write 4096/0x1000
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail GIO fd 6 wrote 4088 bytes
"4NSpZLHDbhEd6S0EbvfgHuRF+wcEedjN"
10200 sendmail GIO fd 6 wrote 8 bytes
"CDLAJuzo"
10200 sendmail RET write 4096/0x1000
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail GIO fd 6 wrote 4088 bytes
"KAk8QcecnNwsCJEYhJvkeHrstwiBdvIe"
10200 sendmail GIO fd 6 wrote 8 bytes
"ZGZEfN+7"
10200 sendmail RET write 4096/0x1000
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail RET write -1 errno 13 Permission denied
10200 sendmail CALL read(5,0x8144000,0x4000)
10200 sendmail GIO fd 5 read 4088 bytes
"dvvBZx9//PhWAwST3+xWOZ+v1yBUNNQ0"
10200 sendmail GIO fd 5 read 4088 bytes
"K3lyh1ALBGZJgiKck2RpTKsHsXubN4is"
10200 sendmail GIO fd 5 read 4088 bytes
"XO/7qjGFhZnmglRVEiFEsxCO4l7dwSBI"
10200 sendmail GIO fd 5 read 4088 bytes
"zIxXj7Zffev12e2Vbev7wzgtvY8AsJnf"
10200 sendmail GIO fd 5 read 32 bytes
"evpCtDWlCuZEVisN2Bpk3UA4CMGgbK3B"
10200 sendmail RET read 16384/0x4000
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail RET write -1 errno 13 Permission denied
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail RET write -1 errno 13 Permission denied
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail RET write -1 errno 13 Permission denied
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail RET write -1 errno 13 Permission denied
10200 sendmail CALL read(5,0x8144000,0x4000)
10200 sendmail GIO fd 5 read 4016 bytes
"Jymkeopp
JgcK4F8TbMr87Te/nMrjcdn"
10200 sendmail RET read 4016/0xfb0
10200 sendmail CALL write(6,0x8143000,0x1000)
10200 sendmail RET write -1 errno 13 Permission denied
10200 sendmail CALL read(5,0x8144000,0x4000)
10200 sendmail GIO fd 5 read 0 bytes
""
10200 sendmail RET read 0
10200 sendmail CALL lseek(5,0,0,0,1)
10200 sendmail RET lseek 102320/0x18fb0
10200 sendmail CALL lseek(5,0,0,0,0)
10200 sendmail RET lseek 0
10200 sendmail CALL write(6,0x8143000,0x780)
10200 sendmail GIO fd 6 wrote 1920 bytes
"Ye/eYAz4qOjPRO/RxzhFbYC1P/T94XR/"
10200 sendmail RET write 1920/0x780
10200 sendmail CALL write(1,0x8133000,0x15)
10200 sendmail GIO fd 1 wrote 21 bytes
"putbody: write error
"
..
The tcpdump for the packets exchanged is (may unfortunately contain an additional conversation):
07:51:08.950201 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 46787, offset 0, flags [DF], length: 60) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: S [tcp sum ok] 2620927889:2620927889(0) win 32768 <mss 1452,nop,wscale 0,nop,nop,timestamp 0 0>
07:51:09.094187 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40662, offset 0, flags [DF], length: 60) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: S [tcp sum ok] 4119679699:4119679699(0) ack 2620927890 win 33120 <nop,nop,timestamp 1532706939 0,mss 1460,nop,wscale 1>
07:51:09.094248 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 5567, offset 0, flags [DF], length: 52) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 1:1(0) ack 1 win 33580 <nop,nop,timestamp 0 1532706939>
07:51:09.297024 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40663, offset 0, flags [DF], length: 89) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: P [tcp sum ok] 1:38(37) ack 1 win 33120 <nop,nop,timestamp 1532707141 0>
07:51:09.297176 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 63173, offset 0, flags [DF], length: 74) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: P [tcp sum ok] 1:23(22) ack 38 win 33580 <nop,nop,timestamp 0 1532707141>
07:51:09.439675 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40664, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 38:38(0) ack 23 win 33120 <nop,nop,timestamp 1532707286 0>
07:51:09.440537 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40665, offset 0, flags [DF], length: 134) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: P [tcp sum ok] 38:120(82) ack 23 win 33120 <nop,nop,timestamp 1532707286 0>
07:51:09.440747 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 6537, offset 0, flags [DF], length: 92) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: P [tcp sum ok] 23:63(40) ack 120 win 33580 <nop,nop,timestamp 1 1532707286>
07:51:09.583687 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40666, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 120:120(0) ack 63 win 33120 <nop,nop,timestamp 1532707429 1>
07:51:09.663136 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40667, offset 0, flags [DF], length: 60) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: P [tcp sum ok] 120:128(8) ack 63 win 33120 <nop,nop,timestamp 1532707506 1>
07:51:09.663408 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 28862, offset 0, flags [DF], length: 84) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: P [tcp sum ok] 63:95(32) ack 128 win 33580 <nop,nop,timestamp 1 1532707506>
07:51:09.905191 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40668, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 128:128(0) ack 95 win 33120 <nop,nop,timestamp 1532707752 1>
07:51:09.927527 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40669, offset 0, flags [DF], length: 97) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: P [tcp sum ok] 128:173(45) ack 95 win 33120 <nop,nop,timestamp 1532707774 1>
07:51:09.928456 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 64445, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 95:1535(1440) ack 173 win 33580 <nop,nop,timestamp 1 1532707774>
07:51:09.928475 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 34741, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 1535:2975(1440) ack 173 win 33580 <nop,nop,timestamp 1 1532707774>
07:51:09.928486 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 59576, offset 0, flags [DF], length: 1268) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: P [tcp sum ok] 2975:4191(1216) ack 173 win 33580 <nop,nop,timestamp 1 1532707774>
07:51:09.928666 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 1193, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 4191:5631(1440) ack 173 win 33580 <nop,nop,timestamp 1 1532707774>
07:51:09.928677 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 5626, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 5631:7071(1440) ack 173 win 33580 <nop,nop,timestamp 1 1532707774>
07:51:09.928779 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 33933, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 7071:8511(1440) ack 173 win 33580 <nop,nop,timestamp 1 1532707774>
07:51:10.208495 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40670, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 2975 win 32400 <nop,nop,timestamp 1532708054 1>
07:51:10.208551 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 10393, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 8511:9951(1440) ack 173 win 33580 <nop,nop,timestamp 2 1532707774>
07:51:10.208569 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 24054, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 9951:11391(1440) ack 173 win 33580 <nop,nop,timestamp 2 1532707774>
07:51:10.208583 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 49334, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 11391:12831(1440) ack 173 win 33580 <nop,nop,timestamp 2 1532707774>
07:51:10.320022 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40671, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 5631 win 31792 <nop,nop,timestamp 1532708167 1>
07:51:10.320068 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 27011, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 12831:14271(1440) ack 173 win 33580 <nop,nop,timestamp 2 1532707774>
07:51:10.320087 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 60118, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 14271:15711(1440) ack 173 win 33580 <nop,nop,timestamp 2 1532707774>
07:51:10.320100 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 46074, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 15711:17151(1440) ack 173 win 33580 <nop,nop,timestamp 2 1532707774>
07:51:10.442064 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40672, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 8511 win 32400 <nop,nop,timestamp 1532708288 1>
07:51:10.442084 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 54680, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 17151:18591(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532707774>
07:51:10.442097 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 55747, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 18591:20031(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532707774>
07:51:10.442109 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 60304, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 20031:21471(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532707774>
07:51:10.563194 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40673, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 11391 win 32400 <nop,nop,timestamp 1532708410 2>
07:51:10.563226 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 41648, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 21471:22911(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532707774>
07:51:10.563241 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 50835, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 22911:24351(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532707774>
07:51:10.563252 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 13799, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 24351:25791(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532707774>
07:51:10.684189 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40674, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 14271 win 32400 <nop,nop,timestamp 1532708531 2>
07:51:10.684223 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 63974, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 25791:27231(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532707774>
07:51:10.684237 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 46238, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 27231:28671(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532707774>
07:51:10.684249 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 54490, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 28671:30111(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532707774>
07:51:10.808163 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40675, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 17151 win 32400 <nop,nop,timestamp 1532708652 2>
07:51:10.808182 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 53928, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 30111:31551(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532707774>
07:51:10.808196 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 4042, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 31551:32991(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532707774>
07:51:10.808206 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 17151, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 32991:34431(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532707774>
07:51:10.926694 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40676, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 20031 win 32400 <nop,nop,timestamp 1532708773 3>
07:51:10.926714 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 14509, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 34431:35871(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532707774>
07:51:10.926728 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 60568, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 35871:37311(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532707774>
07:51:10.926738 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 1182, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 37311:38751(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532707774>
07:51:11.050005 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40677, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 22911 win 32400 <nop,nop,timestamp 1532708894 3>
07:51:11.050035 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 13053, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 38751:40191(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532707774>
07:51:11.050048 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 31431, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 40191:41631(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532707774>
07:51:11.050058 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 61106, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 41631:43071(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532707774>
07:51:11.170207 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40678, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 25791 win 32400 <nop,nop,timestamp 1532709015 3>
07:51:11.170253 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 38337, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 43071:44511(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532707774>
07:51:11.170276 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 44181, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 44511:45951(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532707774>
07:51:11.170289 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 44960, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 45951:47391(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532707774>
07:51:11.293514 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40679, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 28671 win 32400 <nop,nop,timestamp 1532709136 3>
07:51:11.293562 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 3798, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 47391:48831(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532707774>
07:51:11.293583 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 38375, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 48831:50271(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532707774>
07:51:11.293596 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 129, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 50271:51711(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532707774>
07:51:11.413508 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40680, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 31551 win 32400 <nop,nop,timestamp 1532709258 3>
07:51:11.413529 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 8867, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 51711:53151(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532707774>
07:51:11.413545 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 64207, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 53151:54591(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532707774>
07:51:11.413556 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 55780, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 54591:56031(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532707774>
07:51:11.533505 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40681, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 34431 win 32400 <nop,nop,timestamp 1532709378 3>
07:51:11.533535 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 52987, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 56031:57471(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532707774>
07:51:11.533549 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 50417, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 57471:58911(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532707774>
07:51:11.533559 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 28583, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 58911:60351(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532707774>
07:51:11.653697 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40682, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 37311 win 32400 <nop,nop,timestamp 1532709500 3>
07:51:11.653743 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 15318, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 60351:61791(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532707774>
07:51:11.653758 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 6600, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 61791:63231(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532707774>
07:51:11.653771 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 29862, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 63231:64671(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532707774>
07:51:11.774500 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40683, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 40191 win 32400 <nop,nop,timestamp 1532709621 3>
07:51:11.774521 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 52444, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 64671:66111(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532707774>
07:51:11.774531 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 9381, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 66111:67551(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532707774>
07:51:11.774540 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 8439, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 67551:68991(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532707774>
07:51:11.895502 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40684, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 43071 win 32400 <nop,nop,timestamp 1532709742 4>
07:51:11.895520 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 45216, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 68991:70431(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532707774>
07:51:11.895531 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 8155, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 70431:71871(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532707774>
07:51:11.895539 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 44226, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: P [tcp sum ok] 71871:73311(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532707774>
07:51:12.017194 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40685, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 45951 win 32400 <nop,nop,timestamp 1532709863 4>
07:51:12.017301 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 31989, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 73311:74751(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532707774>
07:51:12.017320 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 30390, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: P [tcp sum ok] 74751:76191(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532707774>
07:51:12.017354 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 7858, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 76191:77631(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532707774>
07:51:12.144436 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40686, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 48831 win 32400 <nop,nop,timestamp 1532709984 4>
07:51:12.144488 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 48865, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 77631:79071(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532707774>
07:51:12.144505 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 35822, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 79071:80511(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532707774>
07:51:12.284521 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40687, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 51711 win 32400 <nop,nop,timestamp 1532710106 4>
07:51:12.284578 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 30419, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 81951:83391(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532707774>
07:51:12.379698 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40688, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 54591 win 32400 <nop,nop,timestamp 1532710226 4>
07:51:12.379727 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 64767, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 84831:86271(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532707774>
07:51:12.501512 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40689, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 57471 win 32400 <nop,nop,timestamp 1532710348 4>
07:51:12.501555 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 12440, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 87711:89151(1440) ack 173 win 33580 <nop,nop,timestamp 7 1532707774>
07:51:12.629722 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40690, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 60351 win 32400 <nop,nop,timestamp 1532710469 5>
07:51:12.629765 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 29569, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 90591:92031(1440) ack 173 win 33580 <nop,nop,timestamp 7 1532707774>
07:51:12.744430 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40691, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 63231 win 32400 <nop,nop,timestamp 1532710590 5>
07:51:12.744457 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 32897, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 93471:94911(1440) ack 173 win 33580 <nop,nop,timestamp 7 1532707774>
07:51:12.864708 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40692, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 66111 win 32400 <nop,nop,timestamp 1532710711 5>
07:51:12.864733 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 64940, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 96351:97791(1440) ack 173 win 33580 <nop,nop,timestamp 7 1532707774>
07:51:12.865213 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 57530, offset 0, flags [DF], length: 532) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: FP [tcp sum ok] 97791:98271(480) ack 173 win 33580 <nop,nop,timestamp 7 1532707774>
07:51:12.993000 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40693, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 68991 win 32400 <nop,nop,timestamp 1532710832 5>
07:51:13.107192 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40694, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 71871 win 32400 <nop,nop,timestamp 1532710953 5>
07:51:13.230703 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40695, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 74751 win 32400 <nop,nop,timestamp 1532711075 5>
07:51:13.350506 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40696, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 77631 win 32400 <nop,nop,timestamp 1532711196 6>
07:51:13.470720 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40697, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 80511 win 32400 <nop,nop,timestamp 1532711317 6>
07:51:13.511985 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40698, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 80511 win 33120 <nop,nop,timestamp 1532711357 6>
07:51:13.576185 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40699, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 80511 win 33120 <nop,nop,timestamp 1532711418 6>
07:51:13.633164 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40700, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 80511 win 33120 <nop,nop,timestamp 1532711478 6>
07:51:13.696263 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40701, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 80511 win 33120 <nop,nop,timestamp 1532711539 6>
07:51:13.696291 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 63380, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 80511:81951(1440) ack 173 win 33580 <nop,nop,timestamp 9 1532707774>
07:51:13.754657 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40702, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 80511 win 33120 <nop,nop,timestamp 1532711600 6>
07:51:13.818666 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40703, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 80511 win 33120 <nop,nop,timestamp 1532711660 6>
07:51:13.835549 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40704, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 80511 win 33120 <nop,nop,timestamp 1532711682 6>
07:51:13.897711 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40705, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 83391 win 33120 <nop,nop,timestamp 1532711743 9>
07:51:13.897730 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 21220, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 83391:84831(1440) ack 173 win 33580 <nop,nop,timestamp 9 1532707774>
07:51:14.100216 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40706, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 86271 win 33120 <nop,nop,timestamp 1532711942 9>
07:51:17.592380 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 56192, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 86271:87711(1440) ack 173 win 33580 <nop,nop,timestamp 17 1532707774>
07:51:17.792069 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40707, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 89151 win 33120 <nop,nop,timestamp 1532715637 17>
07:51:17.792104 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 33175, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 89151:90591(1440) ack 173 win 33580 <nop,nop,timestamp 17 1532707774>
07:51:17.792121 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 12525, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 90591:92031(1440) ack 173 win 33580 <nop,nop,timestamp 17 1532707774>
07:51:17.994073 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40708, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 92031 win 33120 <nop,nop,timestamp 1532715838 17>
07:51:17.994098 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 37606, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 92031:93471(1440) ack 173 win 33580 <nop,nop,timestamp 18 1532707774>
07:51:17.994112 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 8180, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 93471:94911(1440) ack 173 win 33580 <nop,nop,timestamp 18 1532707774>
07:51:17.994124 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 43434, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 94911:96351(1440) ack 173 win 33580 <nop,nop,timestamp 18 1532707774>
07:51:18.051831 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40709, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 92031 win 33120 <nop,nop,timestamp 1532715898 17>
07:51:18.199761 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40710, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 94911 win 33120 <nop,nop,timestamp 1532716040 18>
07:51:18.199808 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 28288, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 96351:97791(1440) ack 173 win 33580 <nop,nop,timestamp 18 1532707774>
07:51:18.199823 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 904, offset 0, flags [DF], length: 532) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: FP [tcp sum ok] 97791:98271(480) ack 173 win 33580 <nop,nop,timestamp 18 1532707774>
07:51:18.254724 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40711, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 94911 win 33120 <nop,nop,timestamp 1532716101 18>
07:51:18.317587 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40712, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 173:173(0) ack 98272 win 33120 <nop,nop,timestamp 1532716162 18>
07:51:18.319034 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40713, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: F [tcp sum ok] 173:173(0) ack 98272 win 33120 <nop,nop,timestamp 1532716164 18>
07:51:18.319057 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 21911, offset 0, flags [DF], length: 52) pD9EA5BA2.dip.t-dialin.net.63825 > www.ntp.org.smtp: . [tcp sum ok] 98272:98272(0) ack 174 win 33580 <nop,nop,timestamp 18 1532716164>
07:51:18.398574 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40714, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 174:174(0) ack 98272 win 33120 <nop,nop,timestamp 1532716245 18>
07:51:18.421542 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40715, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63825: . [tcp sum ok] 174:174(0) ack 98272 win 33120 <nop,nop,timestamp 1532716267 18>
07:52:17.875795 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 52941, offset 0, flags [DF], length: 60) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: S [tcp sum ok] 705925191:705925191(0) win 32768 <mss 1452,nop,wscale 0,nop,nop,timestamp 0 0>
07:52:18.017692 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40716, offset 0, flags [DF], length: 60) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: S [tcp sum ok] 3617851240:3617851240(0) ack 705925192 win 33120 <nop,nop,timestamp 1532775863 0,mss 1460,nop,wscale 1>
07:52:18.017752 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 44679, offset 0, flags [DF], length: 52) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 1:1(0) ack 1 win 33580 <nop,nop,timestamp 1 1532775863>
07:52:18.221736 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40717, offset 0, flags [DF], length: 89) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: P [tcp sum ok] 1:38(37) ack 1 win 33120 <nop,nop,timestamp 1532776066 1>
07:52:18.222421 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 54760, offset 0, flags [DF], length: 74) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: P [tcp sum ok] 1:23(22) ack 38 win 33580 <nop,nop,timestamp 1 1532776066>
07:52:18.364194 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40718, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 38:38(0) ack 23 win 33120 <nop,nop,timestamp 1532776209 1>
07:52:18.365570 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40719, offset 0, flags [DF], length: 134) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: P [tcp sum ok] 38:120(82) ack 23 win 33120 <nop,nop,timestamp 1532776210 1>
07:52:18.366674 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 45311, offset 0, flags [DF], length: 92) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: P [tcp sum ok] 23:63(40) ack 120 win 33580 <nop,nop,timestamp 1 1532776210>
07:52:18.507689 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40720, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 120:120(0) ack 63 win 33120 <nop,nop,timestamp 1532776354 1>
07:52:18.584021 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40721, offset 0, flags [DF], length: 60) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: P [tcp sum ok] 120:128(8) ack 63 win 33120 <nop,nop,timestamp 1532776429 1>
07:52:18.584597 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 1689, offset 0, flags [DF], length: 84) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: P [tcp sum ok] 63:95(32) ack 128 win 33580 <nop,nop,timestamp 2 1532776429>
07:52:18.828694 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40722, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 128:128(0) ack 95 win 33120 <nop,nop,timestamp 1532776674 2>
07:52:18.976713 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40723, offset 0, flags [DF], length: 97) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: P [tcp sum ok] 128:173(45) ack 95 win 33120 <nop,nop,timestamp 1532776811 2>
07:52:18.978131 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 42200, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 95:1535(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532776811>
07:52:18.978148 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 44725, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 1535:2975(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532776811>
07:52:18.978158 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 26566, offset 0, flags [DF], length: 1268) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: P [tcp sum ok] 2975:4191(1216) ack 173 win 33580 <nop,nop,timestamp 3 1532776811>
07:52:18.978350 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 48858, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 4191:5631(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532776811>
07:52:18.978362 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 60120, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 5631:7071(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532776811>
07:52:18.978473 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 27334, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 7071:8511(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532776811>
07:52:19.256680 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40724, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 2975 win 32400 <nop,nop,timestamp 1532777103 3>
07:52:19.256726 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 21148, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 8511:9951(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532776811>
07:52:19.256745 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 37331, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 9951:11391(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532776811>
07:52:19.256758 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 44281, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 11391:12831(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532776811>
07:52:19.371035 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40725, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 5631 win 31792 <nop,nop,timestamp 1532777217 3>
07:52:19.371082 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 24031, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 12831:14271(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532776811>
07:52:19.371099 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 31225, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 14271:15711(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532776811>
07:52:19.371113 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 1240, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 15711:17151(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532776811>
07:52:19.492049 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40726, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 8511 win 32400 <nop,nop,timestamp 1532777338 3>
07:52:19.492067 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 39378, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 17151:18591(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532776811>
07:52:19.492080 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 61918, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 18591:20031(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532776811>
07:52:19.492091 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 33239, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 20031:21471(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532776811>
07:52:19.614681 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40727, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 11391 win 32400 <nop,nop,timestamp 1532777459 3>
07:52:19.614754 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 23463, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 21471:22911(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532776811>
07:52:19.614773 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 8415, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 22911:24351(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532776811>
07:52:19.614786 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 42397, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 24351:25791(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532776811>
07:52:19.739687 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40728, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 14271 win 32400 <nop,nop,timestamp 1532777580 3>
07:52:19.739707 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 1714, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 25791:27231(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532776811>
07:52:19.739719 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 17356, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 27231:28671(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532776811>
07:52:19.739731 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 58526, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 28671:30111(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532776811>
07:52:19.855196 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40729, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 17151 win 32400 <nop,nop,timestamp 1532777701 3>
07:52:19.855215 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 7862, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 30111:31551(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532776811>
07:52:19.855228 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 23496, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 31551:32991(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532776811>
07:52:19.855238 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 30426, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 32991:34431(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532776811>
07:52:19.985051 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40730, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 20031 win 32400 <nop,nop,timestamp 1532777823 4>
07:52:19.985136 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 5865, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 34431:35871(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532776811>
07:52:19.985159 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 37071, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 35871:37311(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532776811>
07:52:19.985171 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 38856, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 37311:38751(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532776811>
07:52:20.098727 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40731, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 22911 win 32400 <nop,nop,timestamp 1532777944 4>
07:52:20.098766 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 57072, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 38751:40191(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532776811>
07:52:20.098782 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 61824, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 40191:41631(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532776811>
07:52:20.098793 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 17053, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 41631:43071(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532776811>
07:52:20.220739 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40732, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 25791 win 32400 <nop,nop,timestamp 1532778065 4>
07:52:20.220787 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 36817, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 43071:44511(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532776811>
07:52:20.220811 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 58089, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 44511:45951(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532776811>
07:52:20.220824 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 26251, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 45951:47391(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532776811>
07:52:20.340073 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40733, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 28671 win 32400 <nop,nop,timestamp 1532778186 4>
07:52:20.340122 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 46802, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 47391:48831(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532776811>
07:52:20.340142 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 10680, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 48831:50271(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532776811>
07:52:20.340156 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 26105, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 50271:51711(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532776811>
07:52:20.465551 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40734, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 31551 win 32400 <nop,nop,timestamp 1532778307 4>
07:52:20.465571 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 61597, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 51711:53151(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532776811>
07:52:20.465586 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 12964, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 53151:54591(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532776811>
07:52:20.465597 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 43396, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 54591:56031(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532776811>
07:52:20.586716 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40735, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 34431 win 32400 <nop,nop,timestamp 1532778428 4>
07:52:20.586791 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 54420, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 56031:57471(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532776811>
07:52:20.586809 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 15802, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 57471:58911(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532776811>
07:52:20.586820 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 44202, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 58911:60351(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532776811>
07:52:20.726522 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40736, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 37311 win 32400 <nop,nop,timestamp 1532778549 5>
07:52:20.726547 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 14068, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 60351:61791(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532776811>
07:52:20.726561 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 20953, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 61791:63231(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532776811>
07:52:20.726574 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 41185, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 63231:64671(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532776811>
07:52:20.825035 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40737, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 40191 win 32400 <nop,nop,timestamp 1532778670 5>
07:52:20.825056 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 19102, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 64671:66111(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532776811>
07:52:20.825069 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 56496, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 66111:67551(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532776811>
07:52:20.825079 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 18614, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 67551:68991(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532776811>
07:52:20.946006 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40738, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 43071 win 32400 <nop,nop,timestamp 1532778791 5>
07:52:20.946036 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 19843, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 68991:70431(1440) ack 173 win 33580 <nop,nop,timestamp 7 1532776811>
07:52:20.946048 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 42894, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 70431:71871(1440) ack 173 win 33580 <nop,nop,timestamp 7 1532776811>
07:52:20.946057 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 29946, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: P [tcp sum ok] 71871:73311(1440) ack 173 win 33580 <nop,nop,timestamp 7 1532776811>
07:52:21.077227 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40739, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 45951 win 32400 <nop,nop,timestamp 1532778913 5>
07:52:21.077249 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 26100, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 73311:74751(1440) ack 173 win 33580 <nop,nop,timestamp 7 1532776811>
07:52:21.077261 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 46215, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: P [tcp sum ok] 74751:76191(1440) ack 173 win 33580 <nop,nop,timestamp 7 1532776811>
07:52:21.077279 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 12191, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 76191:77631(1440) ack 173 win 33580 <nop,nop,timestamp 7 1532776811>
07:52:21.190068 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40740, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 48831 win 32400 <nop,nop,timestamp 1532779034 5>
07:52:21.190129 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 59032, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 77631:79071(1440) ack 173 win 33580 <nop,nop,timestamp 7 1532776811>
07:52:21.190150 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 5817, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 79071:80511(1440) ack 173 win 33580 <nop,nop,timestamp 7 1532776811>
07:52:21.312063 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40741, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 51711 win 32400 <nop,nop,timestamp 1532779155 5>
07:52:21.312123 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 1494, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 81951:83391(1440) ack 173 win 33580 <nop,nop,timestamp 7 1532776811>
07:52:21.431016 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40742, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 54591 win 32400 <nop,nop,timestamp 1532779276 6>
07:52:21.431045 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 44696, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 84831:86271(1440) ack 173 win 33580 <nop,nop,timestamp 7 1532776811>
07:52:21.554032 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40743, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 57471 win 32400 <nop,nop,timestamp 1532779397 6>
07:52:21.554070 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 18901, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 87711:89151(1440) ack 173 win 33580 <nop,nop,timestamp 8 1532776811>
07:52:21.678748 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40744, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 60351 win 32400 <nop,nop,timestamp 1532779518 6>
07:52:21.678799 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 59321, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 90591:92031(1440) ack 173 win 33580 <nop,nop,timestamp 8 1532776811>
07:52:21.795196 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40745, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 63231 win 32400 <nop,nop,timestamp 1532779640 6>
07:52:21.795249 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 19700, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 93471:94911(1440) ack 173 win 33580 <nop,nop,timestamp 8 1532776811>
07:52:21.915551 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40746, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 66111 win 32400 <nop,nop,timestamp 1532779761 6>
07:52:21.915578 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 56985, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 96351:97791(1440) ack 173 win 33580 <nop,nop,timestamp 8 1532776811>
07:52:21.917123 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 5838, offset 0, flags [DF], length: 532) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: FP [tcp sum ok] 97791:98271(480) ack 173 win 33580 <nop,nop,timestamp 8 1532776811>
07:52:22.036026 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40747, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 68991 win 32400 <nop,nop,timestamp 1532779882 6>
07:52:22.157244 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40748, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 71871 win 32400 <nop,nop,timestamp 1532780003 7>
07:52:22.278526 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40749, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 74751 win 32400 <nop,nop,timestamp 1532780124 7>
07:52:22.401726 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40750, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 77631 win 32400 <nop,nop,timestamp 1532780245 7>
07:52:22.520065 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40751, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 80511 win 32400 <nop,nop,timestamp 1532780366 7>
07:52:22.561716 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40752, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 80511 win 33120 <nop,nop,timestamp 1532780407 7>
07:52:22.623719 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40753, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 80511 win 33120 <nop,nop,timestamp 1532780468 7>
07:52:22.686067 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40754, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 80511 win 33120 <nop,nop,timestamp 1532780528 7>
07:52:22.743067 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40755, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 80511 win 33120 <nop,nop,timestamp 1532780589 7>
07:52:22.743099 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 43914, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 80511:81951(1440) ack 173 win 33580 <nop,nop,timestamp 10 1532776811>
07:52:22.803748 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40756, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 80511 win 33120 <nop,nop,timestamp 1532780649 7>
07:52:22.864252 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40757, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 80511 win 33120 <nop,nop,timestamp 1532780710 7>
07:52:22.886074 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40758, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 80511 win 33120 <nop,nop,timestamp 1532780732 7>
07:52:22.948486 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40759, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 83391 win 33120 <nop,nop,timestamp 1532780793 10>
07:52:22.948523 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 17844, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 83391:84831(1440) ack 173 win 33580 <nop,nop,timestamp 11 1532776811>
07:52:23.155737 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40760, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 86271 win 33120 <nop,nop,timestamp 1532780994 11>
07:52:26.652265 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 18084, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 86271:87711(1440) ack 173 win 33580 <nop,nop,timestamp 18 1532776811>
07:52:26.851229 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40761, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 89151 win 33120 <nop,nop,timestamp 1532784696 18>
07:52:26.851280 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 37329, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 89151:90591(1440) ack 173 win 33580 <nop,nop,timestamp 18 1532776811>
07:52:26.851299 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 10649, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 90591:92031(1440) ack 173 win 33580 <nop,nop,timestamp 18 1532776811>
07:52:27.058262 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40762, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 92031 win 33120 <nop,nop,timestamp 1532784897 18>
07:52:27.058317 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 38814, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 92031:93471(1440) ack 173 win 33580 <nop,nop,timestamp 19 1532776811>
07:52:27.058335 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 44430, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 93471:94911(1440) ack 173 win 33580 <nop,nop,timestamp 19 1532776811>
07:52:27.058348 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 24214, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 94911:96351(1440) ack 173 win 33580 <nop,nop,timestamp 19 1532776811>
07:52:27.112747 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40763, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 92031 win 33120 <nop,nop,timestamp 1532784958 18>
07:52:27.276591 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40764, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 94911 win 33120 <nop,nop,timestamp 1532785103 19>
07:52:27.276638 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 12737, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 96351:97791(1440) ack 173 win 33580 <nop,nop,timestamp 19 1532776811>
07:52:27.276653 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 46500, offset 0, flags [DF], length: 532) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: FP [tcp sum ok] 97791:98271(480) ack 173 win 33580 <nop,nop,timestamp 19 1532776811>
07:52:27.318578 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40765, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 94911 win 33120 <nop,nop,timestamp 1532785164 19>
07:52:27.378605 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40766, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 173:173(0) ack 98272 win 33120 <nop,nop,timestamp 1532785224 19>
07:52:27.387603 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40767, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: F [tcp sum ok] 173:173(0) ack 98272 win 33120 <nop,nop,timestamp 1532785231 19>
07:52:27.387618 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 2728, offset 0, flags [DF], length: 52) pD9EA5BA2.dip.t-dialin.net.63821 > www.ntp.org.smtp: . [tcp sum ok] 98272:98272(0) ack 174 win 33580 <nop,nop,timestamp 19 1532785231>
07:52:27.475292 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40768, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 174:174(0) ack 98272 win 33120 <nop,nop,timestamp 1532785321 19>
07:52:27.498258 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40769, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63821: . [tcp sum ok] 174:174(0) ack 98272 win 33120 <nop,nop,timestamp 1532785343 19>
07:52:50.436381 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 8119, offset 0, flags [DF], length: 60) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: S [tcp sum ok] 1844176988:1844176988(0) win 32768 <mss 1452,nop,wscale 0,nop,nop,timestamp 0 0>
07:52:50.582267 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40770, offset 0, flags [DF], length: 60) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: S [tcp sum ok] 3034812031:3034812031(0) ack 1844176989 win 33120 <nop,nop,timestamp 1532808424 0,mss 1460,nop,wscale 1>
07:52:50.582299 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 22732, offset 0, flags [DF], length: 52) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 1:1(0) ack 1 win 33580 <nop,nop,timestamp 0 1532808424>
07:52:50.726478 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40771, offset 0, flags [DF], length: 89) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: P [tcp sum ok] 1:38(37) ack 1 win 33120 <nop,nop,timestamp 1532808570 0>
07:52:50.726578 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 22721, offset 0, flags [DF], length: 74) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: P [tcp sum ok] 1:23(22) ack 38 win 33580 <nop,nop,timestamp 0 1532808570>
07:52:50.868250 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40772, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 38:38(0) ack 23 win 33120 <nop,nop,timestamp 1532808714 0>
07:52:50.869324 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40773, offset 0, flags [DF], length: 134) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: P [tcp sum ok] 38:120(82) ack 23 win 33120 <nop,nop,timestamp 1532808714 0>
07:52:50.869602 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 45780, offset 0, flags [DF], length: 92) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: P [tcp sum ok] 23:63(40) ack 120 win 33580 <nop,nop,timestamp 0 1532808714>
07:52:51.013256 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40774, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 120:120(0) ack 63 win 33120 <nop,nop,timestamp 1532808858 0>
07:52:51.037453 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40775, offset 0, flags [DF], length: 60) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: P [tcp sum ok] 120:128(8) ack 63 win 33120 <nop,nop,timestamp 1532808882 0>
07:52:51.037840 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 34231, offset 0, flags [DF], length: 84) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: P [tcp sum ok] 63:95(32) ack 128 win 33580 <nop,nop,timestamp 1 1532808882>
07:52:51.280267 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40776, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 128:128(0) ack 95 win 33120 <nop,nop,timestamp 1532809126 1>
07:52:51.289780 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40777, offset 0, flags [DF], length: 97) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: P [tcp sum ok] 128:173(45) ack 95 win 33120 <nop,nop,timestamp 1532809134 1>
07:52:51.290769 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 10132, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 95:1535(1440) ack 173 win 33580 <nop,nop,timestamp 1 1532809134>
07:52:51.290788 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 41685, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 1535:2975(1440) ack 173 win 33580 <nop,nop,timestamp 1 1532809134>
07:52:51.290798 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 25316, offset 0, flags [DF], length: 1268) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: P [tcp sum ok] 2975:4191(1216) ack 173 win 33580 <nop,nop,timestamp 1 1532809134>
07:52:51.290977 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 27289, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 4191:5631(1440) ack 173 win 33580 <nop,nop,timestamp 1 1532809134>
07:52:51.290988 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 24797, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 5631:7071(1440) ack 173 win 33580 <nop,nop,timestamp 1 1532809134>
07:52:51.291089 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 52424, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 7071:8511(1440) ack 173 win 33580 <nop,nop,timestamp 1 1532809134>
07:52:51.572445 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40778, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 2975 win 32400 <nop,nop,timestamp 1532809416 1>
07:52:51.572481 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 47531, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 8511:9951(1440) ack 173 win 33580 <nop,nop,timestamp 2 1532809134>
07:52:51.572494 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 47855, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 9951:11391(1440) ack 173 win 33580 <nop,nop,timestamp 2 1532809134>
07:52:51.572504 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 41176, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 11391:12831(1440) ack 173 win 33580 <nop,nop,timestamp 2 1532809134>
07:52:51.683928 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40779, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 5631 win 31792 <nop,nop,timestamp 1532809529 1>
07:52:51.683960 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 1998, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 12831:14271(1440) ack 173 win 33580 <nop,nop,timestamp 2 1532809134>
07:52:51.683974 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 61636, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 14271:15711(1440) ack 173 win 33580 <nop,nop,timestamp 2 1532809134>
07:52:51.683987 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 24731, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 15711:17151(1440) ack 173 win 33580 <nop,nop,timestamp 2 1532809134>
07:52:51.807273 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40780, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 8511 win 32400 <nop,nop,timestamp 1532809650 1>
07:52:51.807292 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 22761, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 17151:18591(1440) ack 173 win 33580 <nop,nop,timestamp 2 1532809134>
07:52:51.807304 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 20176, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 18591:20031(1440) ack 173 win 33580 <nop,nop,timestamp 2 1532809134>
07:52:51.807315 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 60379, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 20031:21471(1440) ack 173 win 33580 <nop,nop,timestamp 2 1532809134>
07:52:51.926933 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40781, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 11391 win 32400 <nop,nop,timestamp 1532809772 2>
07:52:51.926952 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 53200, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 21471:22911(1440) ack 173 win 33580 <nop,nop,timestamp 2 1532809134>
07:52:51.926964 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 3017, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 22911:24351(1440) ack 173 win 33580 <nop,nop,timestamp 2 1532809134>
07:52:51.926974 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 26768, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 24351:25791(1440) ack 173 win 33580 <nop,nop,timestamp 2 1532809134>
07:52:52.050260 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40782, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 14271 win 32400 <nop,nop,timestamp 1532809893 2>
07:52:52.050289 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 7843, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 25791:27231(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532809134>
07:52:52.050302 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 14827, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 27231:28671(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532809134>
07:52:52.050312 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 62689, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 28671:30111(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532809134>
07:52:52.174986 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40783, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 17151 win 32400 <nop,nop,timestamp 1532810014 2>
07:52:52.175030 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 60880, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 30111:31551(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532809134>
07:52:52.175051 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 53193, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 31551:32991(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532809134>
07:52:52.175062 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 35314, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 32991:34431(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532809134>
07:52:52.289975 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40784, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 20031 win 32400 <nop,nop,timestamp 1532810136 2>
07:52:52.290022 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 64479, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 34431:35871(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532809134>
07:52:52.290044 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 61681, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 35871:37311(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532809134>
07:52:52.290055 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 6837, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 37311:38751(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532809134>
07:52:52.414780 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40785, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 22911 win 32400 <nop,nop,timestamp 1532810257 2>
07:52:52.414799 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 21899, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 38751:40191(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532809134>
07:52:52.414813 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 15273, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 40191:41631(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532809134>
07:52:52.414823 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 30145, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 41631:43071(1440) ack 173 win 33580 <nop,nop,timestamp 3 1532809134>
07:52:52.533477 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40786, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 25791 win 32400 <nop,nop,timestamp 1532810378 2>
07:52:52.533519 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 37620, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 43071:44511(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532809134>
07:52:52.533539 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 12442, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 44511:45951(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532809134>
07:52:52.533550 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 38364, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 45951:47391(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532809134>
07:52:52.653444 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40787, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 28671 win 32400 <nop,nop,timestamp 1532810499 3>
07:52:52.653481 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 57840, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 47391:48831(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532809134>
07:52:52.653498 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 51097, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 48831:50271(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532809134>
07:52:52.653509 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 52892, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 50271:51711(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532809134>
07:52:52.776779 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40788, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 31551 win 32400 <nop,nop,timestamp 1532810620 3>
07:52:52.776800 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 21671, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 51711:53151(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532809134>
07:52:52.776815 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 48032, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 53151:54591(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532809134>
07:52:52.776826 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 3244, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 54591:56031(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532809134>
07:52:52.895417 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40789, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 34431 win 32400 <nop,nop,timestamp 1532810741 3>
07:52:52.895439 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 52160, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 56031:57471(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532809134>
07:52:52.895450 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 55241, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 57471:58911(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532809134>
07:52:52.895460 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 22984, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 58911:60351(1440) ack 173 win 33580 <nop,nop,timestamp 4 1532809134>
07:52:53.022783 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40790, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 37311 win 32400 <nop,nop,timestamp 1532810862 3>
07:52:53.022815 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 46326, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 60351:61791(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532809134>
07:52:53.022828 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 3769, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 61791:63231(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532809134>
07:52:53.022838 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 56729, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 63231:64671(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532809134>
07:52:53.144799 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40791, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 40191 win 32400 <nop,nop,timestamp 1532810983 3>
07:52:53.144849 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 42188, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 64671:66111(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532809134>
07:52:53.144866 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 53176, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 66111:67551(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532809134>
07:52:53.144877 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 7857, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 67551:68991(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532809134>
07:52:53.258786 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40792, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 43071 win 32400 <nop,nop,timestamp 1532811104 3>
07:52:53.258837 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 36806, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 68991:70431(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532809134>
07:52:53.258853 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 58539, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 70431:71871(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532809134>
07:52:53.258865 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 18829, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: P [tcp sum ok] 71871:73311(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532809134>
07:52:53.380482 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40793, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 45951 win 32400 <nop,nop,timestamp 1532811226 4>
07:52:53.380506 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 38365, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 73311:74751(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532809134>
07:52:53.380520 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 39887, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: P [tcp sum ok] 74751:76191(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532809134>
07:52:53.380539 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 20909, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 76191:77631(1440) ack 173 win 33580 <nop,nop,timestamp 5 1532809134>
07:52:53.501283 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40794, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 48831 win 32400 <nop,nop,timestamp 1532811347 4>
07:52:53.501322 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 11436, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 77631:79071(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532809134>
07:52:53.501338 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 42194, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 79071:80511(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532809134>
07:52:53.623457 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40795, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 51711 win 32400 <nop,nop,timestamp 1532811468 4>
07:52:53.623505 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 9981, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 81951:83391(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532809134>
07:52:53.743456 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40796, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 54591 win 32400 <nop,nop,timestamp 1532811589 4>
07:52:53.743483 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 62099, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 84831:86271(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532809134>
07:52:53.867429 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40797, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 57471 win 32400 <nop,nop,timestamp 1532811710 4>
07:52:53.867453 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 49562, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 87711:89151(1440) ack 173 win 33580 <nop,nop,timestamp 6 1532809134>
07:52:53.985796 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40798, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 60351 win 32400 <nop,nop,timestamp 1532811831 4>
07:52:53.985831 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 47313, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 90591:92031(1440) ack 173 win 33580 <nop,nop,timestamp 7 1532809134>
07:52:54.107441 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40799, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 63231 win 32400 <nop,nop,timestamp 1532811953 5>
07:52:54.107526 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 55700, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 93471:94911(1440) ack 173 win 33580 <nop,nop,timestamp 7 1532809134>
07:52:54.229463 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40800, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 66111 win 32400 <nop,nop,timestamp 1532812074 5>
07:52:54.229525 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 42748, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 96351:97791(1440) ack 173 win 33580 <nop,nop,timestamp 7 1532809134>
07:52:54.230006 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 28855, offset 0, flags [DF], length: 532) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: FP [tcp sum ok] 97791:98271(480) ack 173 win 33580 <nop,nop,timestamp 7 1532809134>
07:52:54.348816 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40801, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 68991 win 32400 <nop,nop,timestamp 1532812195 5>
07:52:54.472761 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40802, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 71871 win 32400 <nop,nop,timestamp 1532812316 5>
07:52:54.591466 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40803, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 74751 win 32400 <nop,nop,timestamp 1532812437 5>
07:52:54.711964 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40804, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 77631 win 32400 <nop,nop,timestamp 1532812558 5>
07:52:54.845283 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40805, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 80511 win 32400 <nop,nop,timestamp 1532812683 6>
07:52:54.878791 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40806, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 80511 win 33120 <nop,nop,timestamp 1532812724 6>
07:52:54.940479 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40807, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 80511 win 33120 <nop,nop,timestamp 1532812784 6>
07:52:55.006789 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40808, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 80511 win 33120 <nop,nop,timestamp 1532812845 6>
07:52:55.059966 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40809, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 80511 win 33120 <nop,nop,timestamp 1532812905 6>
07:52:55.060004 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 10936, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 80511:81951(1440) ack 173 win 33580 <nop,nop,timestamp 9 1532809134>
07:52:55.120796 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40810, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 80511 win 33120 <nop,nop,timestamp 1532812966 6>
07:52:55.182003 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40811, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 80511 win 33120 <nop,nop,timestamp 1532813026 6>
07:52:55.205796 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40812, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 80511 win 33120 <nop,nop,timestamp 1532813049 6>
07:52:55.269300 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40813, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 83391 win 33120 <nop,nop,timestamp 1532813110 9>
07:52:55.269344 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 28566, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 83391:84831(1440) ack 173 win 33580 <nop,nop,timestamp 9 1532809134>
07:52:55.467969 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40814, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 86271 win 33120 <nop,nop,timestamp 1532813314 9>
07:52:58.962208 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 29346, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 86271:87711(1440) ack 173 win 33580 <nop,nop,timestamp 17 1532809134>
07:52:59.163848 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40815, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 89151 win 33120 <nop,nop,timestamp 1532817007 17>
07:52:59.163920 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 11257, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 89151:90591(1440) ack 173 win 33580 <nop,nop,timestamp 17 1532809134>
07:52:59.163940 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 31683, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 90591:92031(1440) ack 173 win 33580 <nop,nop,timestamp 17 1532809134>
07:52:59.362828 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40816, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 92031 win 33120 <nop,nop,timestamp 1532817208 17>
07:52:59.362859 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 3814, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 92031:93471(1440) ack 173 win 33580 <nop,nop,timestamp 17 1532809134>
07:52:59.362877 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 51880, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 93471:94911(1440) ack 173 win 33580 <nop,nop,timestamp 17 1532809134>
07:52:59.362889 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 17120, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 94911:96351(1440) ack 173 win 33580 <nop,nop,timestamp 17 1532809134>
07:52:59.424827 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40817, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 92031 win 33120 <nop,nop,timestamp 1532817268 17>
07:52:59.561984 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40818, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 94911 win 33120 <nop,nop,timestamp 1532817407 17>
07:52:59.562015 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 5324, offset 0, flags [DF], length: 1492) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 96351:97791(1440) ack 173 win 33580 <nop,nop,timestamp 18 1532809134>
07:52:59.562029 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 2026, offset 0, flags [DF], length: 532) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: FP [tcp sum ok] 97791:98271(480) ack 173 win 33580 <nop,nop,timestamp 18 1532809134>
07:52:59.621566 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40819, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 94911 win 33120 <nop,nop,timestamp 1532817467 17>
07:52:59.683476 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40820, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 173:173(0) ack 98272 win 33120 <nop,nop,timestamp 1532817528 17>
07:52:59.689312 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40821, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: F [tcp sum ok] 173:173(0) ack 98272 win 33120 <nop,nop,timestamp 1532817535 17>
07:52:59.689330 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 64, id 16593, offset 0, flags [DF], length: 52) pD9EA5BA2.dip.t-dialin.net.63819 > www.ntp.org.smtp: . [tcp sum ok] 98272:98272(0) ack 174 win 33580 <nop,nop,timestamp 18 1532817535>
07:52:59.764544 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40822, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 174:174(0) ack 98272 win 33120 <nop,nop,timestamp 1532817607 17>
07:52:59.785345 PPPoE [ses 0x17e1] IP (tos 0x0, ttl 55, id 40823, offset 0, flags [DF], length: 52) www.ntp.org.smtp > pD9EA5BA2.dip.t-dialin.net.63819: . [tcp sum ok] 174:174(0) ack 98272 win 33120 <nop,nop,timestamp 1532817629 17>
The ipmon output is:
Nov 14 07:52:51 pip ipmon[3971]: 07:52:50.436371 pppoe0 @154:1 p pD9EA5BA2.dip.t-dialin.net[217.234.91.162],63819 -> www.ntp.org[128.4.35.16],smtp PR tcp len 20 60 -S K-S K-F OUT NAT
Nov 14 07:52:54 pip ipmon[3971]: 07:52:53.501368 5x pppoe0 @0:1 b pD9EA5BA2.dip.t-dialin.net[217.234.91.162],63819 -> www.ntp.org[128.4.35.16],smtp PR tcp len 20 1492 -AP OUT OOW
Nov 14 07:52:55 pip ipmon[3971]: 07:52:54.107554 pppoe0 @0:1 b pD9EA5BA2.dip.t-dialin.net[217.234.91.162],63819 -> www.ntp.org[128.4.35.16],smtp PR tcp len 20 1492 -AP OUT OOW
>How-To-Repeat:
run a recent x.99. Configure ipf as FW with keep state rules for outgoing connections. Try to email
something in the 100k area to an @ntp.org address. Watch sendmail fail with putbody I/O errors.
See OOW blocking in ipmon output.
>Fix:
Workarounds:
- disable IPF (not really feasable)
- disable fr_tcpinwindow() check ?
Fix:
- check window checking logic
- find my misunderstandings if ipf should be right here ...