Subject: Re: gateway with IPNAT
To: matt <stirfrey@gmail.com>
From: Vojko Kercan <vojkokercan@gmail.com>
List: netbsd-help
Date: 02/11/2006 16:28:57
------=_Part_6756_11983611.1139671737342
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
I would say that my network configuration is OK. I tried disabling
internal addapter thou (ifoncfig rtk0 down) and yes... I can still
ping the outside world. What did you mean by "wrong gateway on the BSD
box"?
I included tcpdump -i output for both nics (rtk1 and rtk0). I don't
know if this will help...but tcpdump for internal nic (rtk0) shows an
output of 2 actions from the client (1) ping to BSD box (2) ping to
outside world.
Regards, Vojko.
On 10/02/06, matt <stirfrey@gmail.com> wrote:
> Vojko Kercan wrote:
> > Yes...you are right...rtk1 is getting a DHCP address. I've tried
> > changing /etc/ipnat.conf, but it did not yield success.
> >
> > Here is the output of sysctl, so the forwarding is enabled:
> > # sysctl net.inet.ip.forwarding
> > net.inet.ip.forwarding =3D 1
> >
> > I can't read also the content of tcpdump...so here it is. This is an
> > output when I try to ping Google at my client machine.
> >
> > -----------------------------------------------------------------------=
-------------------
> >
> > # tcpdump -v
> > tcpdump: listening on rtk0, link-type EN10MB (Ethernet), capture size 9=
6 bytes
> >
> > 19:42:09.393727 IP (tos 0x0, ttl 128, id 115, offset 0, flags [none],
> > length: 78) 10.0.0.2.netbios-ns > 10.0.0.255.netbios-ns: [udp sum ok]
> > NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
> >
> > 19:42:10.138950 IP (tos 0x0, ttl 128, id 116, offset 0, flags [none],
> > length: 78) 10.0.0.2.netbios-ns > 10.0.0.255.netbios-ns: [udp sum ok]
> > NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
> >
> > 19:42:10.890086 IP (tos 0x0, ttl 128, id 117, offset 0, flags [none],
> > length: 78) 10.0.0.2.netbios-ns > 10.0.0.255.netbios-ns: [udp sum ok]
> > NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
> >
> > -----------------------------------------------------------------------=
-------------------
> >
> > # tcpdump -vv
> >
> > tcpdump: listening on rtk0, link-type EN10MB (Ethernet), capture size 9=
6 bytes
> > 19:45:48.564409 IP (tos 0x0, ttl 128, id 121, offset 0, flags [none],
> > length: 78) 10.0.0.2.netbios-ns > 10.0.0.255.netbios-ns: [udp sum ok]
> >
> >>>> NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
> >>>>
> > TrnID=3D0x803D
> > OpCode=3D0
> > NmFlags=3D0x11
> > Rcode=3D0
> > QueryCount=3D1
> > AnswerCount=3D0
> > AuthorityCount=3D0
> > AddressRecCount=3D0
> > QuestionRecords:
> > Name=3DWWW.GOOGLE.COM NameType=3D0x00 (Workstation)
> > QuestionType=3D0x20
> > QuestionClass=3D0x1
> >
> > 19:45:49.310134 IP (tos 0x0, ttl 128, id 122, offset 0, flags [none],
> > length: 78) 10.0.0.2.netbios-ns > 10.0.0.255.netbios-ns: [udp sum ok]
> >
> >>>> NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
> >>>>
> > TrnID=3D0x803D
> > OpCode=3D0
> > NmFlags=3D0x11
> > Rcode=3D0
> > QueryCount=3D1
> > AnswerCount=3D0
> > AuthorityCount=3D0
> > AddressRecCount=3D0
> > QuestionRecords:
> > Name=3DWWW.GOOGLE.COM NameType=3D0x00 (Workstation)
> > QuestionType=3D0x20
> > QuestionClass=3D0x1
> >
> > 19:45:50.061238 IP (tos 0x0, ttl 128, id 123, offset 0, flags [none],
> > length: 78) 10.0.0.2.netbios-ns > 10.0.0.255.netbios-ns: [udp sum ok]
> >
> >>>> NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
> >>>>
> > TrnID=3D0x803D
> > OpCode=3D0
> > NmFlags=3D0x11
> > Rcode=3D0
> > QueryCount=3D1
> > AnswerCount=3D0
> > AuthorityCount=3D0
> > AddressRecCount=3D0
> > QuestionRecords:
> > Name=3DWWW.GOOGLE.COM NameType=3D0x00 (Workstation)
> > QuestionType=3D0x20
> > QuestionClass=3D0x1
> >
> > -----------------------------------------------------------------------=
-------------------
> >
> > Here is also ipnat -s output
> >
> > # ipnat -s
> > mapped in 0 out 0
> > added 0 expired 0
> > no memory 0 bad nat 0
> > inuse 0
> > rules 3
> > wilds 0
> >
> > Hopefully this will help.
> >
> > Vojko
> >
> >
> > On 09/02/06, matt <stirfrey@gmail.com> wrote:
> >
> >> Vojko Kercan wrote:
> >>
> >>> After reading the manuals, forums and mailing lists...I still haven't
> >>> found what is wrong with my IPNAT configuration. Hopefully...somebody
> >>> will know what I have missed.
> >>>
> >>> Objective: set up a gateway machine to share a single internet connec=
tion
> >>> Gateway: NetBSD 3.0 i386
> >>> Clients: Linux, Win
> >>>
> >>> (1) Gateway settings
> >>>
> >>> NIC 1 - rtk1 - connected to ISP via DHCP
> >>> NIC 2 - rtk0 - connected to internal network via switch
> >>>
> >>> /etc/ifconfig.xxN
> >>> rtk1: !dhclient $int
> >>> rtk0: inet 10.0.0.1 netmask 0xffffff00
> >>>
> >>> ifconfig output
> >>> rtk1: inet 213.143.79.9 netmask 0xffffff00 broadcast 213.143.79.255
> >>> rtk0: inet 10.0.0.1 netmask 0xffffff00 broadcast 10.0.0.255
> >>>
> >>> /etc/ipf.conf
> >>> pass in from any to any
> >>> pass out from any to any
> >>>
> >>> /etc/ipnat.conf
> >>> map rtk1 10.0.0.0/24 -> 213.143.79.9/32 proxy port ftp ftp/tcp
> >>> map rtk1 10.0.0.0/24 -> 213.143.79.9/32 portmap tcp/udp 40000:60000
> >>> map rtk1 10.0.0.0/24 -> 213.143.79.9/32
> >>>
> >>> /etc/sysctl.conf
> >>> net.inet.ip.forwarding=3D1
> >>>
> >>> /etc/rc.conf
> >>> ipfilter=3DYES
> >>> ipnat=3DYES
> >>>
> >>> (2) Client settings
> >>>
> >>> IP: 10.0.0.2
> >>> Gateway: 10.0.0.1
> >>>
> >>> Of course, gateway can access the internet, and ping gateway < - >
> >>> client works OK, yet internet is still not available on client
> >>> machine.
> >>>
> >>> What did I miss?
> >>>
> >>> Many thanx in advance, Vojko.
> >>>
> >>>
> >>>
> >> The only thing that jumps out at me is that rtk1 appears to be getting=
a
> >> dhcp address. Right? I've never specified it that way so if I'm wrong
> >> let me know. Anyway, then I see that in your ipnat rules your specifyi=
ng
> >> the IP that has been assigned via dhcp. Try changing
> >>
> >> map rtk1 10.0.0.0/24 -> 213.143.79.9/32 proxy port ftp ftp/tcp
> >> map rtk1 10.0.0.0/24 -> 213.143.79.9/32 portmap tcp/udp 40000:60000
> >> map rtk1 10.0.0.0/24 -> 213.143.79.9/32
> >>
> >> To,
> >>
> >> map rtk1 10.0.0.0/24 -> 0/32 proxy port ftp ftp/tcp
> >> map rtk1 10.0.0.0/24 -> 0/32 portmap tcp/udp 40000:60000
> >> map rtk1 10.0.0.0/24 -> 0/32
> >>
> >> If nothing else your router will be able to have its IP change and not
> >> need to be reconfigured.
> >>
> >> Also try typing in "sysctl net.inet.ip.forwarding", and make sure that
> >> it comes back as "1". If not then that setting isn't taking for some
> >> reason. The last thing you could do is run a tcpdump on your interface=
s
> >> and see if the request is getting passed but blocked or dropped for so=
me
> >> reason. Also, "ipnat -s" might give some useful information. I don't
> >> know what most of the info means, but someone else might have an idea.
> >>
> >> Matt
> >>
> >>
> >
> >
> Can I see a tcpdump output from the rtk1 adapter. I believe "tcpdump -i
> rtk1" will do the trick. Check the man page though.
>
> How is your network setup right now? Are you running 2 gateways at the
> same time? On the BSD box disconnect your internal adapter and see if
> you can still ping the outside world. I'm thinking your problem is some
> other configuration error. Wrong gateway on the BSD box or something
> along those lines.
>
> Matt
>
------=_Part_6756_11983611.1139671737342
Content-Type: application/octet-stream; name=tcpdump_rtk0
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="tcpdump_rtk0"
16:25:41.946056 IP 10.0.0.2 > 10.0.0.1: icmp 40: echo request seq 3072
16:25:41.946079 IP 10.0.0.1 > 10.0.0.2: icmp 40: echo reply seq 3072
16:25:42.946225 IP 10.0.0.2 > 10.0.0.1: icmp 40: echo request seq 3328
16:25:42.946246 IP 10.0.0.1 > 10.0.0.2: icmp 40: echo reply seq 3328
16:25:43.947727 IP 10.0.0.2 > 10.0.0.1: icmp 40: echo request seq 3584
16:25:43.947749 IP 10.0.0.1 > 10.0.0.2: icmp 40: echo reply seq 3584
16:25:44.949215 IP 10.0.0.2 > 10.0.0.1: icmp 40: echo request seq 3840
16:25:44.949236 IP 10.0.0.1 > 10.0.0.2: icmp 40: echo reply seq 3840
16:25:46.580107 IP 10.0.0.2.netbios-ns > 10.0.0.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
16:25:47.322788 IP 10.0.0.2.netbios-ns > 10.0.0.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
16:25:48.073915 IP 10.0.0.2.netbios-ns > 10.0.0.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
------=_Part_6756_11983611.1139671737342
Content-Type: application/octet-stream; name=tcpdump_rtk1
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="tcpdump_rtk1"
16:15:25.344888 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.2919: . ack 2399407176 win 33580 <nop,nop,timestamp 1 130281967>
16:15:25.391660 IP host90-246.pool81116.interbusiness.it.2919 > tm.213.143.79.9.dc.telemach.net.ssh: P 1:53(52) ack 0 win 8320 <nop,nop,timestamp 130281991 1>
16:15:25.391806 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.2919: P 0:52(52) ack 53 win 33580 <nop,nop,timestamp 1 130281991>
16:15:25.486559 IP host90-246.pool81116.interbusiness.it.2919 > tm.213.143.79.9.dc.telemach.net.ssh: P 53:137(84) ack 52 win 8320 <nop,nop,timestamp 130281998 1>
16:15:25.488529 IP tm.213.143.79.9.dc.telemach.net.63741 > ns1.telemach.net.domain: 33576+ PTR? 90.246.116.81.in-addr.arpa. (44)
16:15:25.494830 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63741: 33576 1/4/4 (241)
16:15:25.495403 IP tm.213.143.79.9.dc.telemach.net.63740 > ns1.telemach.net.domain: 33577+[|domain]
16:15:25.501556 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63740: 33577 1/2/2 (145)
16:15:25.502243 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.2919: P 52:136(84) ack 137 win 33580 <nop,nop,timestamp 1 130281998>
16:15:25.552148 IP host90-246.pool81116.interbusiness.it.2919 > tm.213.143.79.9.dc.telemach.net.ssh: P 137:189(52) ack 136 win 8320 <nop,nop,timestamp 130282007 1>
16:15:25.552360 IP host90-246.pool81116.interbusiness.it.2919 > tm.213.143.79.9.dc.telemach.net.ssh: F 189:189(0) ack 136 win 8320 <nop,nop,timestamp 130282007 1>
16:15:25.552375 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.2919: . ack 190 win 33580 <nop,nop,timestamp 2 130282007>
16:15:25.552635 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.2919: F 136:136(0) ack 190 win 33580 <nop,nop,timestamp 2 130282007>
16:15:25.569059 arp who-has 84.52.131.200 tell 84.52.131.1
16:15:25.586290 arp who-has 84.52.179.87 tell 84.52.179.1
16:15:25.587200 IP host90-246.pool81116.interbusiness.it.3347 > tm.213.143.79.9.dc.telemach.net.ssh: S 2402735380:2402735380(0) win 5840 <mss 1460,sackOK,timestamp 130282011 0,nop,wscale 0>
16:15:25.587233 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3347: S 57911305:57911305(0) ack 2402735381 win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 130282011,sackOK,nop,nop>
16:15:25.601508 IP host90-246.pool81116.interbusiness.it.2919 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 137 win 8320 <nop,nop,timestamp 130282012 2>
16:15:25.640576 IP host90-246.pool81116.interbusiness.it.3347 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1 win 5840 <nop,nop,timestamp 130282016 0>
16:15:25.647566 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3347: P 1:51(50) ack 1 win 33580 <nop,nop,timestamp 0 0>
16:15:25.696548 IP host90-246.pool81116.interbusiness.it.3347 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 51 win 5840 <nop,nop,timestamp 130282021 0>
16:15:25.697219 IP host90-246.pool81116.interbusiness.it.3347 > tm.213.143.79.9.dc.telemach.net.ssh: P 1:21(20) ack 51 win 5840 <nop,nop,timestamp 130282021 0>
16:15:25.698270 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3347: P 51:691(640) ack 21 win 33580 <nop,nop,timestamp 0 130282021>
16:15:25.744647 arp who-has 84.52.179.37 tell 84.52.179.1
16:15:25.761428 IP host90-246.pool81116.interbusiness.it.3347 > tm.213.143.79.9.dc.telemach.net.ssh: P 21:173(152) ack 691 win 7040 <nop,nop,timestamp 130282028 0>
16:15:25.847498 arp who-has 84.52.154.204 tell 84.52.154.1
16:15:25.853872 arp who-has 84.52.179.78 tell 84.52.179.1
16:15:25.876958 arp who-has 84.52.179.201 tell 84.52.179.1
16:15:25.933762 arp who-has 84.52.154.114 tell 84.52.154.1
16:15:25.948345 arp who-has 213.143.94.54 tell TM-94-1.telemach.net
16:15:25.954894 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3347: . ack 173 win 33580 <nop,nop,timestamp 0 130282028>
16:15:25.998208 arp who-has 84.52.171.238 tell 84.52.171.1
16:15:26.001478 IP host90-246.pool81116.interbusiness.it.3347 > tm.213.143.79.9.dc.telemach.net.ssh: P 173:317(144) ack 691 win 7040 <nop,nop,timestamp 130282052 0>
16:15:26.007302 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3347: P 691:1155(464) ack 317 win 33580 <nop,nop,timestamp 0 130282052>
16:15:26.075371 arp who-has 84.52.151.137 tell 84.52.151.1
16:15:26.087051 IP host90-246.pool81116.interbusiness.it.3347 > tm.213.143.79.9.dc.telemach.net.ssh: P 317:333(16) ack 1155 win 8320 <nop,nop,timestamp 130282061 0>
16:15:26.095490 arp who-has 84.52.131.198 tell 84.52.131.1
16:15:26.116959 arp who-has 84.52.154.50 tell 84.52.154.1
16:15:26.170800 arp who-has 84.52.171.114 tell 84.52.171.1
16:15:26.182049 arp who-has 84.52.154.215 tell 84.52.154.1
16:15:26.284904 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3347: . ack 333 win 33580 <nop,nop,timestamp 1 130282061>
16:15:26.315280 IP tm.213.143.79.9.dc.telemach.net.63739 > ns1.telemach.net.domain: 16160+ PTR? 90.246.116.81.in-addr.arpa. (44)
16:15:26.322855 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63739: 16160 1/4/4 (241)
16:15:26.322936 IP tm.213.143.79.9.dc.telemach.net.63738 > ns1.telemach.net.domain: 16161+ PTR? 9.79.143.213.in-addr.arpa. (43)
16:15:26.330557 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63738: 16161* 1/2/2 (156)
16:15:26.330681 IP tm.213.143.79.9.dc.telemach.net.63737 > ns1.telemach.net.domain: 16162+ PTR? 11.65.143.213.in-addr.arpa. (44)
16:15:26.331895 IP host90-246.pool81116.interbusiness.it.3347 > tm.213.143.79.9.dc.telemach.net.ssh: P 333:385(52) ack 1155 win 8320 <nop,nop,timestamp 130282085 1>
16:15:26.332018 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3347: P 1155:1207(52) ack 385 win 33580 <nop,nop,timestamp 1 130282085>
16:15:26.336919 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63737: 16162* 1/2/2 (138)
16:15:26.337163 IP tm.213.143.79.9.dc.telemach.net.63736 > ns1.telemach.net.domain: 16163+ PTR? 200.131.52.84.in-addr.arpa. (44)
16:15:26.377365 IP host90-246.pool81116.interbusiness.it.3347 > tm.213.143.79.9.dc.telemach.net.ssh: P 385:469(84) ack 1207 win 8320 <nop,nop,timestamp 130282090 1>
16:15:26.379316 IP tm.213.143.79.9.dc.telemach.net.63735 > ns1.telemach.net.domain: 14740+ PTR? 90.246.116.81.in-addr.arpa. (44)
16:15:26.384085 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63736: 16163 NXDomain 0/1/0 (99)
16:15:26.384163 IP tm.213.143.79.9.dc.telemach.net.63734 > ns1.telemach.net.domain: 16164+ PTR? 1.131.52.84.in-addr.arpa. (42)
16:15:26.385098 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63735: 14740 1/4/4 (241)
16:15:26.385213 IP tm.213.143.79.9.dc.telemach.net.63733 > ns1.telemach.net.domain: 14741+[|domain]
16:15:26.390775 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63734: 16164 NXDomain 0/1/0 (97)
16:15:26.390829 IP tm.213.143.79.9.dc.telemach.net.63732 > ns1.telemach.net.domain: 16165+ PTR? 87.179.52.84.in-addr.arpa. (43)
16:15:26.390933 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63733: 14741 1/2/2 (145)
16:15:26.391598 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3347: P 1207:1291(84) ack 469 win 33580 <nop,nop,timestamp 1 130282090>
16:15:26.396560 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63732: 16165 NXDomain 0/1/0 (98)
16:15:26.396663 IP tm.213.143.79.9.dc.telemach.net.63731 > ns1.telemach.net.domain: 16166+ PTR? 1.179.52.84.in-addr.arpa. (42)
16:15:26.402638 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63731: 16166 NXDomain 0/1/0 (97)
16:15:26.402734 arp who-has 84.52.171.176 tell 84.52.171.1
16:15:26.402844 IP tm.213.143.79.9.dc.telemach.net.63730 > ns1.telemach.net.domain: 16167+ PTR? 37.179.52.84.in-addr.arpa. (43)
16:15:26.410318 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63730: 16167 NXDomain 0/1/0 (98)
16:15:26.410387 IP tm.213.143.79.9.dc.telemach.net.63729 > ns1.telemach.net.domain: 16168+ PTR? 204.154.52.84.in-addr.arpa. (44)
16:15:26.417006 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63729: 16168 NXDomain 0/1/0 (99)
16:15:26.417049 IP tm.213.143.79.9.dc.telemach.net.63728 > ns1.telemach.net.domain: 16169+ PTR? 1.154.52.84.in-addr.arpa. (42)
16:15:26.424676 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63728: 16169 NXDomain 0/1/0 (97)
16:15:26.424719 IP tm.213.143.79.9.dc.telemach.net.63727 > ns1.telemach.net.domain: 16170+ PTR? 78.179.52.84.in-addr.arpa. (43)
16:15:26.438208 IP host90-246.pool81116.interbusiness.it.3347 > tm.213.143.79.9.dc.telemach.net.ssh: P 469:521(52) ack 1291 win 8320 <nop,nop,timestamp 130282096 1>
16:15:26.438492 IP host90-246.pool81116.interbusiness.it.3347 > tm.213.143.79.9.dc.telemach.net.ssh: F 521:521(0) ack 1291 win 8320 <nop,nop,timestamp 130282096 1>
16:15:26.438508 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3347: . ack 522 win 33580 <nop,nop,timestamp 1 130282096>
16:15:26.438683 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3347: F 1291:1291(0) ack 522 win 33580 <nop,nop,timestamp 1 130282096>
16:15:26.470344 arp who-has tm.213.143.79.231.dc.telemach.net tell tm.213.143.79.1.dc.telemach.net
16:15:26.472437 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63727: 16170 NXDomain 0/1/0 (98)
16:15:26.472557 IP tm.213.143.79.9.dc.telemach.net.63726 > ns1.telemach.net.domain: 16171+ PTR? 201.179.52.84.in-addr.arpa. (44)
16:15:26.478617 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63726: 16171 NXDomain 0/1/0 (99)
16:15:26.478663 IP tm.213.143.79.9.dc.telemach.net.63725 > ns1.telemach.net.domain: 16172+ PTR? 114.154.52.84.in-addr.arpa. (44)
16:15:26.505269 IP host90-246.pool81116.interbusiness.it.3428 > tm.213.143.79.9.dc.telemach.net.ssh: S 2400191105:2400191105(0) win 5840 <mss 1460,sackOK,timestamp 130282100 0,nop,wscale 0>
16:15:26.505302 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3428: S 94679963:94679963(0) ack 2400191106 win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 130282100,sackOK,nop,nop>
16:15:26.506210 IP host90-246.pool81116.interbusiness.it.3347 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1292 win 8320 <nop,nop,timestamp 130282100 1>
16:15:26.514186 arp who-has 84.52.151.197 tell 84.52.151.1
16:15:26.526285 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63725: 16172 NXDomain 0/1/0 (99)
16:15:26.526394 IP tm.213.143.79.9.dc.telemach.net.63724 > ns1.telemach.net.domain: 16173+ PTR? 54.94.143.213.in-addr.arpa. (44)
16:15:26.532974 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63724: 16173 NXDomain* 0/1/0 (107)
16:15:26.533015 IP tm.213.143.79.9.dc.telemach.net.63723 > ns1.telemach.net.domain: 16174+ PTR? 1.94.143.213.in-addr.arpa. (43)
16:15:26.545333 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63723: 16174* 1/2/2 (145)
16:15:26.545435 IP tm.213.143.79.9.dc.telemach.net.63722 > ns1.telemach.net.domain: 16175+ PTR? 238.171.52.84.in-addr.arpa. (44)
16:15:26.552014 IP host90-246.pool81116.interbusiness.it.3428 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1 win 5840 <nop,nop,timestamp 130282107 0>
16:15:26.558356 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3428: P 1:51(50) ack 1 win 33580 <nop,nop,timestamp 1 0>
16:15:26.567771 arp who-has 84.52.131.141 tell 84.52.131.1
16:15:26.576086 arp who-has tm.213.143.84.81.dc.telemach.net tell tm.213.143.84.1.dc.telemach.net
16:15:26.578553 arp who-has 84.52.151.77 tell 84.52.151.1
16:15:26.598096 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63722: 16175 NXDomain 0/1/0 (99)
16:15:26.598200 IP tm.213.143.79.9.dc.telemach.net.63721 > ns1.telemach.net.domain: 16176+ PTR? 1.171.52.84.in-addr.arpa. (42)
16:15:26.603702 IP host90-246.pool81116.interbusiness.it.3428 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 51 win 5840 <nop,nop,timestamp 130282112 1>
16:15:26.603820 IP host90-246.pool81116.interbusiness.it.3428 > tm.213.143.79.9.dc.telemach.net.ssh: P 1:21(20) ack 51 win 5840 <nop,nop,timestamp 130282112 1>
16:15:26.604855 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3428: P 51:691(640) ack 21 win 33580 <nop,nop,timestamp 1 130282112>
16:15:26.606803 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63721: 16176 NXDomain 0/1/0 (97)
16:15:26.606957 IP tm.213.143.79.9.dc.telemach.net.63720 > ns1.telemach.net.domain: 16177+ PTR? 137.151.52.84.in-addr.arpa. (44)
16:15:26.614408 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63720: 16177 NXDomain 0/1/0 (99)
16:15:26.614449 IP tm.213.143.79.9.dc.telemach.net.63719 > ns1.telemach.net.domain: 16178+ PTR? 1.151.52.84.in-addr.arpa. (42)
16:15:26.624147 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63719: 16178 NXDomain 0/1/0 (97)
16:15:26.624211 IP tm.213.143.79.9.dc.telemach.net.63718 > ns1.telemach.net.domain: 16179+ PTR? 198.131.52.84.in-addr.arpa. (44)
16:15:26.630428 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63718: 16179 NXDomain 0/1/0 (99)
16:15:26.630479 IP tm.213.143.79.9.dc.telemach.net.63717 > ns1.telemach.net.domain: 16180+ PTR? 50.154.52.84.in-addr.arpa. (43)
16:15:26.632875 arp who-has 84.52.154.16 tell 84.52.154.1
16:15:26.638856 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63717: 16180 NXDomain 0/1/0 (98)
16:15:26.638945 IP tm.213.143.79.9.dc.telemach.net.63716 > ns1.telemach.net.domain: 16181+ PTR? 114.171.52.84.in-addr.arpa. (44)
16:15:26.659036 IP host90-246.pool81116.interbusiness.it.3428 > tm.213.143.79.9.dc.telemach.net.ssh: P 21:173(152) ack 691 win 7040 <nop,nop,timestamp 130282118 1>
16:15:26.686298 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63716: 16181 NXDomain 0/1/0 (99)
16:15:26.686418 IP tm.213.143.79.9.dc.telemach.net.63715 > ns1.telemach.net.domain: 16182+ PTR? 215.154.52.84.in-addr.arpa. (44)
16:15:26.712790 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63715: 16182 NXDomain 0/1/0 (99)
16:15:26.755272 arp who-has 84.52.131.61 tell 84.52.131.1
16:15:26.825653 arp who-has 84.52.151.118 tell 84.52.151.1
16:15:26.835772 arp who-has 84.52.179.36 tell 84.52.179.1
16:15:26.854907 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3428: . ack 173 win 33580 <nop,nop,timestamp 1 130282118>
16:15:26.902536 IP host90-246.pool81116.interbusiness.it.3428 > tm.213.143.79.9.dc.telemach.net.ssh: P 173:317(144) ack 691 win 7040 <nop,nop,timestamp 130282142 1>
16:15:26.908357 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3428: P 691:1155(464) ack 317 win 33580 <nop,nop,timestamp 1 130282142>
16:15:26.957128 arp who-has 84.52.154.241 tell 84.52.154.1
16:15:26.964142 IP host90-246.pool81116.interbusiness.it.3428 > tm.213.143.79.9.dc.telemach.net.ssh: P 317:333(16) ack 1155 win 8320 <nop,nop,timestamp 130282148 1>
16:15:27.061535 arp who-has 84.52.154.171 tell 84.52.154.1
16:15:27.118317 arp who-has 84.52.171.108 tell 84.52.171.1
16:15:27.154913 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3428: . ack 333 win 33580 <nop,nop,timestamp 2 130282148>
16:15:27.202304 IP host90-246.pool81116.interbusiness.it.3428 > tm.213.143.79.9.dc.telemach.net.ssh: P 333:385(52) ack 1155 win 8320 <nop,nop,timestamp 130282172 2>
16:15:27.202435 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3428: P 1155:1207(52) ack 385 win 33580 <nop,nop,timestamp 2 130282172>
16:15:27.235318 arp who-has 84.52.179.182 tell 84.52.179.1
16:15:27.287762 arp who-has tm.213.143.79.71.dc.telemach.net tell tm.213.143.79.1.dc.telemach.net
16:15:27.533320 arp who-has 84.52.179.212 tell 84.52.179.1
16:15:27.536086 arp who-has 213.143.94.183 tell TM-94-1.telemach.net
16:15:27.595403 arp who-has 84.52.154.101 tell 84.52.154.1
16:15:27.705289 IP tm.213.143.79.9.dc.telemach.net.63714 > ns1.telemach.net.domain: 16183+ PTR? 176.171.52.84.in-addr.arpa. (44)
16:15:27.713496 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63714: 16183 NXDomain 0/1/0 (99)
16:15:27.713700 IP tm.213.143.79.9.dc.telemach.net.63713 > ns1.telemach.net.domain: 16184+ PTR? 231.79.143.213.in-addr.arpa. (45)
16:15:27.721222 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63713: 16184* 1/2/2 (160)
16:15:27.721300 IP tm.213.143.79.9.dc.telemach.net.63712 > ns1.telemach.net.domain: 16185+ PTR? 1.79.143.213.in-addr.arpa. (43)
16:15:27.726723 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63712: 16185* 1/2/2 (156)
16:15:27.726905 IP tm.213.143.79.9.dc.telemach.net.63711 > ns1.telemach.net.domain: 16186+ PTR? 197.151.52.84.in-addr.arpa. (44)
16:15:27.736816 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63711: 16186 NXDomain 0/1/0 (99)
16:15:27.736955 IP tm.213.143.79.9.dc.telemach.net.63710 > ns1.telemach.net.domain: 16187+ PTR? 141.131.52.84.in-addr.arpa. (44)
16:15:27.742645 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63710: 16187 NXDomain 0/1/0 (99)
16:15:27.742690 IP tm.213.143.79.9.dc.telemach.net.63709 > ns1.telemach.net.domain: 16188+ PTR? 81.84.143.213.in-addr.arpa. (44)
16:15:27.751394 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63709: 16188* 1/2/2 (158)
16:15:27.751478 IP tm.213.143.79.9.dc.telemach.net.63708 > ns1.telemach.net.domain: 16189+ PTR? 1.84.143.213.in-addr.arpa. (43)
16:15:27.758816 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63708: 16189* 1/2/2 (156)
16:15:27.758868 IP tm.213.143.79.9.dc.telemach.net.63707 > ns1.telemach.net.domain: 16190+ PTR? 77.151.52.84.in-addr.arpa. (43)
16:15:27.766984 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63707: 16190 NXDomain 0/1/0 (98)
16:15:27.767190 IP tm.213.143.79.9.dc.telemach.net.63706 > ns1.telemach.net.domain: 16191+ PTR? 16.154.52.84.in-addr.arpa. (43)
16:15:27.768858 IP host90-246.pool81116.interbusiness.it.3428 > tm.213.143.79.9.dc.telemach.net.ssh: P 385:469(84) ack 1207 win 8320 <nop,nop,timestamp 130282229 2>
16:15:27.770790 IP tm.213.143.79.9.dc.telemach.net.63705 > ns1.telemach.net.domain: 13059+ PTR? 90.246.116.81.in-addr.arpa. (44)
16:15:27.783473 arp who-has 213.143.94.123 tell TM-94-1.telemach.net
16:15:27.788964 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63705: 13059 1/4/4 (241)
16:15:27.789148 IP tm.213.143.79.9.dc.telemach.net.63704 > ns1.telemach.net.domain: 13060+[|domain]
16:15:27.795521 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63704: 13060 1/2/2 (145)
16:15:27.796198 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3428: P 1207:1291(84) ack 469 win 33580 <nop,nop,timestamp 3 130282229>
16:15:27.826590 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63706: 16191 NXDomain 0/1/0 (98)
16:15:27.826785 IP tm.213.143.79.9.dc.telemach.net.63703 > ns1.telemach.net.domain: 16192+ PTR? 61.131.52.84.in-addr.arpa. (43)
16:15:27.833700 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63703: 16192 NXDomain 0/1/0 (98)
16:15:27.833746 IP tm.213.143.79.9.dc.telemach.net.63702 > ns1.telemach.net.domain: 16193+ PTR? 118.151.52.84.in-addr.arpa. (44)
16:15:27.841269 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63702: 16193 NXDomain 0/1/0 (99)
16:15:27.841352 IP tm.213.143.79.9.dc.telemach.net.63701 > ns1.telemach.net.domain: 16194+ PTR? 36.179.52.84.in-addr.arpa. (43)
16:15:27.844408 IP host90-246.pool81116.interbusiness.it.3428 > tm.213.143.79.9.dc.telemach.net.ssh: P 469:521(52) ack 1291 win 8320 <nop,nop,timestamp 130282236 3>
16:15:27.844839 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3428: F 1291:1291(0) ack 521 win 33580 <nop,nop,timestamp 3 130282236>
16:15:27.848765 IP host90-246.pool81116.interbusiness.it.3428 > tm.213.143.79.9.dc.telemach.net.ssh: F 521:521(0) ack 1291 win 8320 <nop,nop,timestamp 130282236 3>
16:15:27.848782 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3428: . ack 522 win 33580 <nop,nop,timestamp 3 130282236>
16:15:27.878065 IP host90-246.pool81116.interbusiness.it.3582 > tm.213.143.79.9.dc.telemach.net.ssh: S 2405069796:2405069796(0) win 5840 <mss 1460,sackOK,timestamp 130282240 0,nop,wscale 0>
16:15:27.878094 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3582: S 160789070:160789070(0) ack 2405069797 win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 130282240,sackOK,nop,nop>
16:15:27.878185 arp who-has 84.52.179.16 tell 84.52.179.1
16:15:27.888498 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63701: 16194 NXDomain 0/1/0 (98)
16:15:27.888659 IP tm.213.143.79.9.dc.telemach.net.63700 > ns1.telemach.net.domain: 16195+ PTR? 241.154.52.84.in-addr.arpa. (44)
16:15:27.892505 IP host90-246.pool81116.interbusiness.it.3428 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1292 win 8320 <nop,nop,timestamp 130282241 3>
16:15:27.896604 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63700: 16195 NXDomain 0/1/0 (99)
16:15:27.896697 IP tm.213.143.79.9.dc.telemach.net.63699 > ns1.telemach.net.domain: 16196+ PTR? 171.154.52.84.in-addr.arpa. (44)
16:15:27.924103 IP host90-246.pool81116.interbusiness.it.3582 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1 win 5840 <nop,nop,timestamp 130282244 0>
16:15:27.930911 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3582: P 1:51(50) ack 1 win 33580 <nop,nop,timestamp 0 0>
16:15:27.944440 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63699: 16196 NXDomain 0/1/0 (99)
16:15:27.944536 IP tm.213.143.79.9.dc.telemach.net.63698 > ns1.telemach.net.domain: 16197+ PTR? 108.171.52.84.in-addr.arpa. (44)
16:15:27.956125 arp who-has 84.52.151.174 tell 84.52.151.1
16:15:27.992516 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63698: 16197 NXDomain 0/1/0 (99)
16:15:27.992679 IP tm.213.143.79.9.dc.telemach.net.63697 > ns1.telemach.net.domain: 16198+ PTR? 182.179.52.84.in-addr.arpa. (44)
16:15:28.012511 arp who-has 84.52.151.44 tell 84.52.151.1
16:15:28.022674 IP host90-246.pool81116.interbusiness.it.3582 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 51 win 5840 <nop,nop,timestamp 130282254 0>
16:15:28.022792 IP host90-246.pool81116.interbusiness.it.3582 > tm.213.143.79.9.dc.telemach.net.ssh: P 1:21(20) ack 51 win 5840 <nop,nop,timestamp 130282254 0>
16:15:28.023843 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3582: P 51:691(640) ack 21 win 33580 <nop,nop,timestamp 1 130282254>
16:15:28.079729 IP host90-246.pool81116.interbusiness.it.3582 > tm.213.143.79.9.dc.telemach.net.ssh: P 21:173(152) ack 691 win 7040 <nop,nop,timestamp 130282259 1>
16:15:28.190803 arp who-has 84.52.131.37 tell 84.52.131.1
16:15:28.274931 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3582: . ack 173 win 33580 <nop,nop,timestamp 1 130282259>
16:15:28.319468 IP host90-246.pool81116.interbusiness.it.3582 > tm.213.143.79.9.dc.telemach.net.ssh: P 173:317(144) ack 691 win 7040 <nop,nop,timestamp 130282284 1>
16:15:28.324821 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3582: P 691:1155(464) ack 317 win 33580 <nop,nop,timestamp 1 130282284>
16:15:28.382498 IP host90-246.pool81116.interbusiness.it.3582 > tm.213.143.79.9.dc.telemach.net.ssh: P 317:333(16) ack 1155 win 8320 <nop,nop,timestamp 130282290 1>
16:15:28.454434 arp who-has 84.52.179.87 tell 84.52.179.1
16:15:28.462705 arp who-has 84.52.131.200 tell 84.52.131.1
16:15:28.500373 arp who-has 84.52.131.167 tell 84.52.131.1
16:15:28.505183 arp who-has tm.213.143.84.46.dc.telemach.net tell tm.213.143.84.1.dc.telemach.net
16:15:28.574933 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3582: . ack 333 win 33580 <nop,nop,timestamp 2 130282290>
16:15:28.607637 arp who-has 84.52.171.19 tell 84.52.171.1
16:15:28.755929 arp who-has 84.52.154.215 tell 84.52.154.1
16:15:28.765415 arp who-has 84.52.154.204 tell 84.52.154.1
16:15:28.836284 arp who-has 84.52.171.238 tell 84.52.171.1
16:15:28.866436 arp who-has 84.52.151.43 tell 84.52.151.1
16:15:28.868599 IP host90-246.pool81116.interbusiness.it.3582 > tm.213.143.79.9.dc.telemach.net.ssh: P 317:333(16) ack 1155 win 8320 <nop,nop,timestamp 130282339 1>
16:15:28.868625 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3582: . ack 333 win 33580 <nop,nop,timestamp 2 130282290,nop,nop,sack sack 1 {317:333} >
16:15:28.914209 IP host90-246.pool81116.interbusiness.it.3582 > tm.213.143.79.9.dc.telemach.net.ssh: P 333:385(52) ack 1155 win 8320 <nop,nop,timestamp 130282343 2>
16:15:28.914339 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3582: P 1155:1207(52) ack 385 win 33580 <nop,nop,timestamp 2 130282343>
16:15:28.960823 IP host90-246.pool81116.interbusiness.it.3582 > tm.213.143.79.9.dc.telemach.net.ssh: P 385:469(84) ack 1207 win 8320 <nop,nop,timestamp 130282348 2>
16:15:28.962771 IP tm.213.143.79.9.dc.telemach.net.63696 > ns1.telemach.net.domain: 16467+ PTR? 90.246.116.81.in-addr.arpa. (44)
16:15:28.969091 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63696: 16467 1/4/4 (241)
16:15:28.969210 IP tm.213.143.79.9.dc.telemach.net.63695 > ns1.telemach.net.domain: 16468+[|domain]
16:15:28.974794 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63695: 16468 1/2/2 (145)
16:15:28.975978 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3582: P 1207:1291(84) ack 469 win 33580 <nop,nop,timestamp 2 130282348>
16:15:29.023812 IP host90-246.pool81116.interbusiness.it.3582 > tm.213.143.79.9.dc.telemach.net.ssh: P 469:521(52) ack 1291 win 8320 <nop,nop,timestamp 130282354 2>
16:15:29.024264 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3582: F 1291:1291(0) ack 521 win 33580 <nop,nop,timestamp 3 130282354>
16:15:29.024878 IP host90-246.pool81116.interbusiness.it.3582 > tm.213.143.79.9.dc.telemach.net.ssh: F 521:521(0) ack 1291 win 8320 <nop,nop,timestamp 130282354 2>
16:15:29.024892 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3582: . ack 522 win 33580 <nop,nop,timestamp 3 130282354>
16:15:29.053376 IP host90-246.pool81116.interbusiness.it.3718 > tm.213.143.79.9.dc.telemach.net.ssh: S 2403667797:2403667797(0) win 5840 <mss 1460,sackOK,timestamp 130282357 0,nop,wscale 0>
16:15:29.053409 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3718: S 223953124:223953124(0) ack 2403667798 win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 130282357,sackOK,nop,nop>
16:15:29.068278 IP host90-246.pool81116.interbusiness.it.3582 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1292 win 8320 <nop,nop,timestamp 130282359 3>
16:15:29.098847 IP host90-246.pool81116.interbusiness.it.3718 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1 win 5840 <nop,nop,timestamp 130282362 0>
16:15:29.105160 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3718: P 1:51(50) ack 1 win 33580 <nop,nop,timestamp 0 0>
16:15:29.112718 arp who-has 84.52.154.50 tell 84.52.154.1
16:15:29.149848 IP host90-246.pool81116.interbusiness.it.3718 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 51 win 5840 <nop,nop,timestamp 130282367 0>
16:15:29.149966 IP host90-246.pool81116.interbusiness.it.3718 > tm.213.143.79.9.dc.telemach.net.ssh: P 1:21(20) ack 51 win 5840 <nop,nop,timestamp 130282367 0>
16:15:29.151005 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3718: P 51:691(640) ack 21 win 33580 <nop,nop,timestamp 0 130282367>
16:15:29.181383 arp who-has tm.213.143.84.93.dc.telemach.net tell tm.213.143.84.1.dc.telemach.net
16:15:29.201737 arp who-has 84.52.171.108 tell 84.52.171.1
16:15:29.204550 IP host90-246.pool81116.interbusiness.it.3718 > tm.213.143.79.9.dc.telemach.net.ssh: P 21:173(152) ack 691 win 7040 <nop,nop,timestamp 130282372 0>
16:15:29.256344 arp who-has 84.52.151.77 tell 84.52.151.1
16:15:29.261182 arp who-has 84.52.151.197 tell 84.52.151.1
16:15:29.390438 arp who-has 84.52.179.78 tell 84.52.179.1
16:15:29.394946 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3718: . ack 173 win 33580 <nop,nop,timestamp 0 130282372>
16:15:29.444630 IP host90-246.pool81116.interbusiness.it.3718 > tm.213.143.79.9.dc.telemach.net.ssh: P 173:317(144) ack 691 win 7040 <nop,nop,timestamp 130282396 0>
16:15:29.450310 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3718: P 691:1155(464) ack 317 win 33580 <nop,nop,timestamp 0 130282396>
16:15:29.487283 arp who-has 84.52.154.114 tell 84.52.154.1
16:15:29.503533 arp who-has 84.52.171.176 tell 84.52.171.1
16:15:29.518135 IP host90-246.pool81116.interbusiness.it.3718 > tm.213.143.79.9.dc.telemach.net.ssh: P 317:333(16) ack 1155 win 8320 <nop,nop,timestamp 130282402 0>
16:15:29.590291 arp who-has 213.143.94.54 tell TM-94-1.telemach.net
16:15:29.714950 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3718: . ack 333 win 33580 <nop,nop,timestamp 1 130282402>
16:15:29.754506 arp who-has 84.52.154.16 tell 84.52.154.1
16:15:29.759120 IP host90-246.pool81116.interbusiness.it.3718 > tm.213.143.79.9.dc.telemach.net.ssh: P 333:385(52) ack 1155 win 8320 <nop,nop,timestamp 130282428 1>
16:15:29.759252 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3718: P 1155:1207(52) ack 385 win 33580 <nop,nop,timestamp 1 130282428>
16:15:29.805029 IP host90-246.pool81116.interbusiness.it.3718 > tm.213.143.79.9.dc.telemach.net.ssh: P 385:469(84) ack 1207 win 8320 <nop,nop,timestamp 130282432 1>
16:15:29.807108 IP tm.213.143.79.9.dc.telemach.net.63694 > ns1.telemach.net.domain: 48547+ PTR? 90.246.116.81.in-addr.arpa. (44)
16:15:29.813411 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63694: 48547 1/4/4 (241)
16:15:29.813526 IP tm.213.143.79.9.dc.telemach.net.63693 > ns1.telemach.net.domain: 48548+[|domain]
16:15:29.819715 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63693: 48548 1/2/2 (145)
16:15:29.820399 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3718: P 1207:1291(84) ack 469 win 33580 <nop,nop,timestamp 1 130282432>
16:15:29.869237 IP host90-246.pool81116.interbusiness.it.3718 > tm.213.143.79.9.dc.telemach.net.ssh: P 469:521(52) ack 1291 win 8320 <nop,nop,timestamp 130282439 1>
16:15:29.869686 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3718: F 1291:1291(0) ack 521 win 33580 <nop,nop,timestamp 1 130282439>
16:15:29.870139 IP host90-246.pool81116.interbusiness.it.3718 > tm.213.143.79.9.dc.telemach.net.ssh: F 521:521(0) ack 1291 win 8320 <nop,nop,timestamp 130282439 1>
16:15:29.870153 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3718: . ack 522 win 33580 <nop,nop,timestamp 1 130282439>
16:15:29.918675 IP host90-246.pool81116.interbusiness.it.3718 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1292 win 8320 <nop,nop,timestamp 130282444 1>
16:15:29.943138 IP host90-246.pool81116.interbusiness.it.3796 > tm.213.143.79.9.dc.telemach.net.ssh: S 2408565579:2408565579(0) win 5840 <mss 1460,sackOK,timestamp 130282446 0,nop,wscale 0>
16:15:29.943176 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3796: S 267703385:267703385(0) ack 2408565580 win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 130282446,sackOK,nop,nop>
16:15:29.972796 arp who-has 84.52.154.171 tell 84.52.154.1
16:15:29.973250 arp who-has 84.52.151.2 tell 84.52.151.1
16:15:29.988931 IP host90-246.pool81116.interbusiness.it.3796 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1 win 5840 <nop,nop,timestamp 130282451 0>
16:15:29.995371 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3796: P 1:51(50) ack 1 win 33580 <nop,nop,timestamp 0 0>
16:15:30.039451 IP host90-246.pool81116.interbusiness.it.3796 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 51 win 5840 <nop,nop,timestamp 130282456 0>
16:15:30.039934 IP host90-246.pool81116.interbusiness.it.3796 > tm.213.143.79.9.dc.telemach.net.ssh: P 1:21(20) ack 51 win 5840 <nop,nop,timestamp 130282456 0>
16:15:30.040984 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3796: P 51:691(640) ack 21 win 33580 <nop,nop,timestamp 1 130282456>
16:15:30.099673 IP host90-246.pool81116.interbusiness.it.3796 > tm.213.143.79.9.dc.telemach.net.ssh: P 21:173(152) ack 691 win 7040 <nop,nop,timestamp 130282462 1>
16:15:30.127868 arp who-has tm.213.143.79.71.dc.telemach.net tell tm.213.143.79.1.dc.telemach.net
16:15:30.258240 arp who-has 84.52.179.37 tell 84.52.179.1
16:15:30.294960 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3796: . ack 173 win 33580 <nop,nop,timestamp 1 130282462>
16:15:30.308580 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63697: 16198 NXDomain 0/1/0 (99)
16:15:30.308694 IP tm.213.143.79.9.dc.telemach.net.63692 > ns1.telemach.net.domain: 16199+ PTR? 71.79.143.213.in-addr.arpa. (44)
16:15:30.314818 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63692: 16199* 1/2/2 (158)
16:15:30.314873 IP tm.213.143.79.9.dc.telemach.net.63691 > ns1.telemach.net.domain: 16200+ PTR? 212.179.52.84.in-addr.arpa. (44)
16:15:30.323188 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63691: 16200 NXDomain 0/1/0 (99)
16:15:30.323273 IP tm.213.143.79.9.dc.telemach.net.63690 > ns1.telemach.net.domain: 16201+ PTR? 183.94.143.213.in-addr.arpa. (45)
16:15:30.331680 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63690: 16201 NXDomain* 0/1/0 (108)
16:15:30.331727 IP tm.213.143.79.9.dc.telemach.net.63689 > ns1.telemach.net.domain: 16202+ PTR? 101.154.52.84.in-addr.arpa. (44)
16:15:30.345088 IP host90-246.pool81116.interbusiness.it.3796 > tm.213.143.79.9.dc.telemach.net.ssh: P 173:317(144) ack 691 win 7040 <nop,nop,timestamp 130282486 1>
16:15:30.350615 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3796: P 691:1155(464) ack 317 win 33580 <nop,nop,timestamp 1 130282486>
16:15:30.406381 IP host90-246.pool81116.interbusiness.it.3796 > tm.213.143.79.9.dc.telemach.net.ssh: P 317:333(16) ack 1155 win 8320 <nop,nop,timestamp 130282493 1>
16:15:30.457680 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63689: 16202 NXDomain 0/1/0 (99)
16:15:30.538312 arp who-has 213.143.94.210 tell TM-94-1.telemach.net
16:15:30.538783 arp who-has 213.143.94.102 tell TM-94-1.telemach.net
16:15:30.539228 arp who-has tm.213.143.84.46.dc.telemach.net tell tm.213.143.84.1.dc.telemach.net
16:15:30.604966 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3796: . ack 333 win 33580 <nop,nop,timestamp 2 130282493>
16:15:30.650420 IP host90-246.pool81116.interbusiness.it.3796 > tm.213.143.79.9.dc.telemach.net.ssh: P 333:385(52) ack 1155 win 8320 <nop,nop,timestamp 130282517 2>
16:15:30.650558 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3796: P 1155:1207(52) ack 385 win 33580 <nop,nop,timestamp 2 130282517>
16:15:30.696289 IP host90-246.pool81116.interbusiness.it.3796 > tm.213.143.79.9.dc.telemach.net.ssh: P 385:469(84) ack 1207 win 8320 <nop,nop,timestamp 130282521 2>
16:15:30.698246 IP tm.213.143.79.9.dc.telemach.net.63688 > ns1.telemach.net.domain: 18663+ PTR? 90.246.116.81.in-addr.arpa. (44)
16:15:30.701851 arp who-has 84.52.179.157 tell 84.52.179.1
16:15:30.703069 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63688: 18663 1/4/4 (241)
16:15:30.703181 IP tm.213.143.79.9.dc.telemach.net.63687 > ns1.telemach.net.domain: 18664+[|domain]
16:15:30.711466 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63687: 18664 1/2/2 (145)
16:15:30.712116 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3796: P 1207:1291(84) ack 469 win 33580 <nop,nop,timestamp 2 130282521>
16:15:30.735894 arp who-has 84.52.179.112 tell 84.52.179.1
16:15:30.759397 IP host90-246.pool81116.interbusiness.it.3796 > tm.213.143.79.9.dc.telemach.net.ssh: P 469:521(52) ack 1291 win 8320 <nop,nop,timestamp 130282528 2>
16:15:30.759809 IP host90-246.pool81116.interbusiness.it.3796 > tm.213.143.79.9.dc.telemach.net.ssh: F 521:521(0) ack 1291 win 8320 <nop,nop,timestamp 130282528 2>
16:15:30.759827 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3796: . ack 522 win 33580 <nop,nop,timestamp 2 130282528>
16:15:30.759870 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3796: F 1291:1291(0) ack 522 win 33580 <nop,nop,timestamp 2 130282528>
16:15:30.775474 arp who-has 213.143.94.123 tell TM-94-1.telemach.net
16:15:30.783967 arp who-has tm.213.143.84.51.dc.telemach.net tell tm.213.143.84.1.dc.telemach.net
16:15:30.803875 IP host90-246.pool81116.interbusiness.it.3796 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1292 win 8320 <nop,nop,timestamp 130282532 2>
16:15:30.811510 arp who-has 84.52.154.175 tell 84.52.154.1
16:15:30.874570 IP host90-246.pool81116.interbusiness.it.3886 > tm.213.143.79.9.dc.telemach.net.ssh: S 2404574640:2404574640(0) win 5840 <mss 1460,sackOK,timestamp 130282539 0,nop,wscale 0>
16:15:30.874601 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3886: S 310448188:310448188(0) ack 2404574641 win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 130282539,sackOK,nop,nop>
16:15:30.907165 arp who-has 84.52.151.174 tell 84.52.151.1
16:15:30.919837 IP host90-246.pool81116.interbusiness.it.3886 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1 win 5840 <nop,nop,timestamp 130282544 0>
16:15:30.926198 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3886: P 1:51(50) ack 1 win 33580 <nop,nop,timestamp 0 0>
16:15:30.969521 IP host90-246.pool81116.interbusiness.it.3886 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 51 win 5840 <nop,nop,timestamp 130282549 0>
16:15:30.969942 IP host90-246.pool81116.interbusiness.it.3886 > tm.213.143.79.9.dc.telemach.net.ssh: P 1:21(20) ack 51 win 5840 <nop,nop,timestamp 130282549 0>
16:15:30.970989 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3886: P 51:691(640) ack 21 win 33580 <nop,nop,timestamp 0 130282549>
16:15:31.030300 IP host90-246.pool81116.interbusiness.it.3886 > tm.213.143.79.9.dc.telemach.net.ssh: P 21:173(152) ack 691 win 7040 <nop,nop,timestamp 130282555 0>
16:15:31.030541 arp who-has 84.52.151.123 tell 84.52.151.1
16:15:31.034641 arp who-has tm.213.143.79.200.dc.telemach.net tell tm.213.143.79.1.dc.telemach.net
16:15:31.126763 arp who-has 84.52.131.187 tell 84.52.131.1
16:15:31.224976 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3886: . ack 173 win 33580 <nop,nop,timestamp 1 130282555>
16:15:31.275428 IP host90-246.pool81116.interbusiness.it.3886 > tm.213.143.79.9.dc.telemach.net.ssh: P 173:317(144) ack 691 win 7040 <nop,nop,timestamp 130282579 1>
16:15:31.280797 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3886: P 691:1155(464) ack 317 win 33580 <nop,nop,timestamp 1 130282579>
16:15:31.339986 IP host90-246.pool81116.interbusiness.it.3886 > tm.213.143.79.9.dc.telemach.net.ssh: P 317:333(16) ack 1155 win 8320 <nop,nop,timestamp 130282586 1>
16:15:31.342461 arp who-has 84.52.131.53 tell 84.52.131.1
16:15:31.389050 arp who-has 84.52.151.99 tell 84.52.151.1
16:15:31.455349 IP tm.213.143.79.9.dc.telemach.net.63686 > ns1.telemach.net.domain: 16203+ PTR? 123.94.143.213.in-addr.arpa. (45)
16:15:31.466972 arp who-has 84.52.154.209 tell 84.52.154.1
16:15:31.471225 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63686: 16203 NXDomain* 0/1/0 (108)
16:15:31.471569 IP tm.213.143.79.9.dc.telemach.net.63685 > ns1.telemach.net.domain: 16204+ PTR? 16.179.52.84.in-addr.arpa. (43)
16:15:31.477547 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63685: 16204 NXDomain 0/1/0 (98)
16:15:31.477745 IP tm.213.143.79.9.dc.telemach.net.63684 > ns1.telemach.net.domain: 16205+ PTR? 174.151.52.84.in-addr.arpa. (44)
16:15:31.484893 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63684: 16205 NXDomain 0/1/0 (99)
16:15:31.484989 arp who-has 84.52.131.167 tell 84.52.131.1
16:15:31.484994 IP tm.213.143.79.9.dc.telemach.net.63683 > ns1.telemach.net.domain: 16206+ PTR? 44.151.52.84.in-addr.arpa. (43)
16:15:31.491057 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63683: 16206 NXDomain 0/1/0 (98)
16:15:31.491163 IP tm.213.143.79.9.dc.telemach.net.63682 > ns1.telemach.net.domain: 16207+ PTR? 37.131.52.84.in-addr.arpa. (43)
16:15:31.534976 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3886: . ack 333 win 33580 <nop,nop,timestamp 2 130282586>
16:15:31.538426 arp who-has tm.213.143.84.102.dc.telemach.net tell tm.213.143.84.1.dc.telemach.net
16:15:31.543638 arp who-has 84.52.131.13 tell 84.52.131.1
16:15:31.582437 IP host90-246.pool81116.interbusiness.it.3886 > tm.213.143.79.9.dc.telemach.net.ssh: P 333:385(52) ack 1155 win 8320 <nop,nop,timestamp 130282610 2>
16:15:31.582573 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3886: P 1155:1207(52) ack 385 win 33580 <nop,nop,timestamp 2 130282610>
16:15:31.616327 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63682: 16207 NXDomain 0/1/0 (98)
16:15:31.616527 IP tm.213.143.79.9.dc.telemach.net.63681 > ns1.telemach.net.domain: 16208+ PTR? 167.131.52.84.in-addr.arpa. (44)
16:15:31.630559 IP host90-246.pool81116.interbusiness.it.3886 > tm.213.143.79.9.dc.telemach.net.ssh: P 385:469(84) ack 1207 win 8320 <nop,nop,timestamp 130282615 2>
16:15:31.631569 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63681: 16208 NXDomain 0/1/0 (99)
16:15:31.631680 IP tm.213.143.79.9.dc.telemach.net.63680 > ns1.telemach.net.domain: 16209+ PTR? 46.84.143.213.in-addr.arpa. (44)
16:15:31.632642 IP tm.213.143.79.9.dc.telemach.net.63679 > ns1.telemach.net.domain: 18880+ PTR? 90.246.116.81.in-addr.arpa. (44)
16:15:31.657587 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63680: 16209* 1/2/2 (158)
16:15:31.657712 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63679: 18880 1/4/4 (241)
16:15:31.657884 IP tm.213.143.79.9.dc.telemach.net.63678 > ns1.telemach.net.domain: 18881+[|domain]
16:15:31.657917 IP tm.213.143.79.9.dc.telemach.net.63677 > ns1.telemach.net.domain: 16210+ PTR? 19.171.52.84.in-addr.arpa. (43)
16:15:31.669294 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63678: 18881 1/2/2 (145)
16:15:31.669981 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3886: P 1207:1291(84) ack 469 win 33580 <nop,nop,timestamp 2 130282615>
16:15:31.670710 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63677: 16210 NXDomain 0/1/0 (98)
16:15:31.670808 IP tm.213.143.79.9.dc.telemach.net.63676 > ns1.telemach.net.domain: 16211+ PTR? 43.151.52.84.in-addr.arpa. (43)
16:15:31.677033 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63676: 16211 NXDomain 0/1/0 (98)
16:15:31.677501 IP tm.213.143.79.9.dc.telemach.net.63675 > ns1.telemach.net.domain: 16212+ PTR? 93.84.143.213.in-addr.arpa. (44)
16:15:31.691126 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63675: 16212* 1/2/2 (158)
16:15:31.691565 IP tm.213.143.79.9.dc.telemach.net.63674 > ns1.telemach.net.domain: 16213+ PTR? 2.151.52.84.in-addr.arpa. (42)
16:15:31.697189 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63674: 16213 NXDomain 0/1/0 (97)
16:15:31.697538 IP tm.213.143.79.9.dc.telemach.net.63673 > ns1.telemach.net.domain: 16214+ PTR? 210.94.143.213.in-addr.arpa. (45)
16:15:31.703239 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63673: 16214 NXDomain* 0/1/0 (108)
16:15:31.703286 IP tm.213.143.79.9.dc.telemach.net.63672 > ns1.telemach.net.domain: 16215+ PTR? 102.94.143.213.in-addr.arpa. (45)
16:15:31.711086 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63672: 16215 NXDomain* 0/1/0 (108)
16:15:31.711252 IP tm.213.143.79.9.dc.telemach.net.63671 > ns1.telemach.net.domain: 16216+ PTR? 157.179.52.84.in-addr.arpa. (44)
16:15:31.720426 IP host90-246.pool81116.interbusiness.it.3886 > tm.213.143.79.9.dc.telemach.net.ssh: P 469:521(52) ack 1291 win 8320 <nop,nop,timestamp 130282624 2>
16:15:31.720708 IP host90-246.pool81116.interbusiness.it.3886 > tm.213.143.79.9.dc.telemach.net.ssh: F 521:521(0) ack 1291 win 8320 <nop,nop,timestamp 130282624 2>
16:15:31.720722 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3886: . ack 522 win 33580 <nop,nop,timestamp 2 130282624>
16:15:31.720891 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3886: F 1291:1291(0) ack 522 win 33580 <nop,nop,timestamp 2 130282624>
16:15:31.760645 IP host90-246.pool81116.interbusiness.it.3994 > tm.213.143.79.9.dc.telemach.net.ssh: S 2407288884:2407288884(0) win 5840 <mss 1460,sackOK,timestamp 130282628 0,nop,wscale 0>
16:15:31.760683 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3994: S 361055519:361055519(0) ack 2407288885 win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 130282628,sackOK,nop,nop>
16:15:31.770847 IP host90-246.pool81116.interbusiness.it.3886 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1292 win 8320 <nop,nop,timestamp 130282629 2>
16:15:31.794630 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63671: 16216 NXDomain 0/1/0 (99)
16:15:31.794800 IP tm.213.143.79.9.dc.telemach.net.63670 > ns1.telemach.net.domain: 16217+ PTR? 112.179.52.84.in-addr.arpa. (44)
16:15:31.800895 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63670: 16217 NXDomain 0/1/0 (99)
16:15:31.801065 IP tm.213.143.79.9.dc.telemach.net.63669 > ns1.telemach.net.domain: 16218+ PTR? 51.84.143.213.in-addr.arpa. (44)
16:15:31.809020 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63669: 16218* 1/2/2 (158)
16:15:31.809088 IP tm.213.143.79.9.dc.telemach.net.63668 > ns1.telemach.net.domain: 16219+ PTR? 175.154.52.84.in-addr.arpa. (44)
16:15:31.809986 IP host90-246.pool81116.interbusiness.it.3994 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1 win 5840 <nop,nop,timestamp 130282633 0>
16:15:31.816433 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3994: P 1:51(50) ack 1 win 33580 <nop,nop,timestamp 0 0>
16:15:31.827888 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63668: 16219 NXDomain 0/1/0 (99)
16:15:31.828161 IP tm.213.143.79.9.dc.telemach.net.63667 > ns1.telemach.net.domain: 16220+ PTR? 123.151.52.84.in-addr.arpa. (44)
16:15:31.833203 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63667: 16220 NXDomain 0/1/0 (99)
16:15:31.833251 IP tm.213.143.79.9.dc.telemach.net.63666 > ns1.telemach.net.domain: 16221+ PTR? 200.79.143.213.in-addr.arpa. (45)
16:15:31.838820 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63666: 16221* 1/2/2 (160)
16:15:31.838877 IP tm.213.143.79.9.dc.telemach.net.63665 > ns1.telemach.net.domain: 16222+ PTR? 187.131.52.84.in-addr.arpa. (44)
16:15:31.845125 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63665: 16222 NXDomain 0/1/0 (99)
16:15:31.845234 IP tm.213.143.79.9.dc.telemach.net.63664 > ns1.telemach.net.domain: 16223+ PTR? 53.131.52.84.in-addr.arpa. (43)
16:15:31.876413 IP host90-246.pool81116.interbusiness.it.3994 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 51 win 5840 <nop,nop,timestamp 130282639 0>
16:15:31.876534 IP host90-246.pool81116.interbusiness.it.3994 > tm.213.143.79.9.dc.telemach.net.ssh: P 1:21(20) ack 51 win 5840 <nop,nop,timestamp 130282640 0>
16:15:31.877579 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3994: P 51:691(640) ack 21 win 33580 <nop,nop,timestamp 0 130282640>
16:15:31.895466 arp who-has 84.52.151.43 tell 84.52.151.1
16:15:31.915397 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63664: 16223 NXDomain 0/1/0 (98)
16:15:31.915519 IP tm.213.143.79.9.dc.telemach.net.63663 > ns1.telemach.net.domain: 16224+ PTR? 99.151.52.84.in-addr.arpa. (43)
16:15:31.920950 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63663: 16224 NXDomain 0/1/0 (98)
16:15:31.934787 arp who-has 84.52.179.224 tell 84.52.179.1
16:15:31.960931 IP host90-246.pool81116.interbusiness.it.3994 > tm.213.143.79.9.dc.telemach.net.ssh: P 21:173(152) ack 691 win 7040 <nop,nop,timestamp 130282648 0>
16:15:32.079383 arp who-has 84.52.151.44 tell 84.52.151.1
16:15:32.103637 arp who-has 84.52.179.87 tell 84.52.179.1
16:15:32.139450 arp who-has tm.213.143.84.93.dc.telemach.net tell tm.213.143.84.1.dc.telemach.net
16:15:32.154988 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3994: . ack 173 win 33580 <nop,nop,timestamp 1 130282648>
16:15:32.156135 arp who-has 84.52.151.2 tell 84.52.151.1
16:15:32.186337 arp who-has 84.52.171.108 tell 84.52.171.1
16:15:32.201025 IP host90-246.pool81116.interbusiness.it.3994 > tm.213.143.79.9.dc.telemach.net.ssh: P 173:317(144) ack 691 win 7040 <nop,nop,timestamp 130282672 1>
16:15:32.204239 arp who-has 84.52.131.159 tell 84.52.131.1
16:15:32.206835 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3994: P 691:1155(464) ack 317 win 33580 <nop,nop,timestamp 1 130282672>
16:15:32.214510 arp who-has 213.143.94.159 tell TM-94-1.telemach.net
16:15:32.264762 IP host90-246.pool81116.interbusiness.it.3994 > tm.213.143.79.9.dc.telemach.net.ssh: P 317:333(16) ack 1155 win 8320 <nop,nop,timestamp 130282678 1>
16:15:32.454993 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3994: . ack 333 win 33580 <nop,nop,timestamp 1 130282678>
16:15:32.511013 arp who-has 84.52.154.241 tell 84.52.154.1
16:15:32.511733 IP host90-246.pool81116.interbusiness.it.3994 > tm.213.143.79.9.dc.telemach.net.ssh: P 333:385(52) ack 1155 win 8320 <nop,nop,timestamp 130282702 1>
16:15:32.511867 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3994: P 1155:1207(52) ack 385 win 33580 <nop,nop,timestamp 1 130282702>
16:15:32.533460 arp who-has tm.213.143.79.132.dc.telemach.net tell tm.213.143.79.1.dc.telemach.net
16:15:32.562815 IP host90-246.pool81116.interbusiness.it.3994 > tm.213.143.79.9.dc.telemach.net.ssh: P 385:469(84) ack 1207 win 8320 <nop,nop,timestamp 130282708 1>
16:15:32.564772 IP tm.213.143.79.9.dc.telemach.net.63662 > ns1.telemach.net.domain: 28034+ PTR? 90.246.116.81.in-addr.arpa. (44)
16:15:32.572709 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63662: 28034 1/4/4 (241)
16:15:32.572830 IP tm.213.143.79.9.dc.telemach.net.63661 > ns1.telemach.net.domain: 28035+[|domain]
16:15:32.581254 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63661: 28035 1/2/2 (145)
16:15:32.581925 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3994: P 1207:1291(84) ack 469 win 33580 <nop,nop,timestamp 2 130282708>
16:15:32.586880 arp who-has 84.52.131.141 tell 84.52.131.1
16:15:32.630715 IP host90-246.pool81116.interbusiness.it.3994 > tm.213.143.79.9.dc.telemach.net.ssh: P 469:521(52) ack 1291 win 8320 <nop,nop,timestamp 130282715 2>
16:15:32.631112 IP host90-246.pool81116.interbusiness.it.3994 > tm.213.143.79.9.dc.telemach.net.ssh: F 521:521(0) ack 1291 win 8320 <nop,nop,timestamp 130282715 2>
16:15:32.631130 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3994: . ack 522 win 33580 <nop,nop,timestamp 2 130282715>
16:15:32.631193 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.3994: F 1291:1291(0) ack 522 win 33580 <nop,nop,timestamp 2 130282715>
16:15:32.660554 IP host90-246.pool81116.interbusiness.it.4118 > tm.213.143.79.9.dc.telemach.net.ssh: S 2408420253:2408420253(0) win 5840 <mss 1460,sackOK,timestamp 130282718 0,nop,wscale 0>
16:15:32.660591 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4118: S 410354449:410354449(0) ack 2408420254 win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 130282718,sackOK,nop,nop>
16:15:32.681044 IP host90-246.pool81116.interbusiness.it.3994 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1292 win 8320 <nop,nop,timestamp 130282720 2>
16:15:32.706814 IP host90-246.pool81116.interbusiness.it.4118 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1 win 5840 <nop,nop,timestamp 130282723 0>
16:15:32.713113 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4118: P 1:51(50) ack 1 win 33580 <nop,nop,timestamp 0 0>
16:15:32.761058 IP host90-246.pool81116.interbusiness.it.4118 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 51 win 5840 <nop,nop,timestamp 130282728 0>
16:15:32.761177 IP host90-246.pool81116.interbusiness.it.4118 > tm.213.143.79.9.dc.telemach.net.ssh: P 1:21(20) ack 51 win 5840 <nop,nop,timestamp 130282728 0>
16:15:32.762213 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4118: P 51:691(640) ack 21 win 33580 <nop,nop,timestamp 0 130282728>
16:15:32.815984 IP host90-246.pool81116.interbusiness.it.4118 > tm.213.143.79.9.dc.telemach.net.ssh: P 21:173(152) ack 691 win 7040 <nop,nop,timestamp 130282733 0>
16:15:32.903381 arp who-has 84.52.179.36 tell 84.52.179.1
16:15:32.907828 arp who-has 84.52.179.182 tell 84.52.179.1
16:15:32.915102 IP tm.213.143.79.9.dc.telemach.net.63660 > ns1.telemach.net.domain: 16225+ PTR? 209.154.52.84.in-addr.arpa. (44)
16:15:32.916199 arp who-has 84.52.179.37 tell 84.52.179.1
16:15:32.922126 arp who-has 84.52.131.142 tell 84.52.131.1
16:15:32.980244 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63660: 16225 NXDomain 0/1/0 (99)
16:15:32.980469 IP tm.213.143.79.9.dc.telemach.net.63659 > ns1.telemach.net.domain: 16226+ PTR? 102.84.143.213.in-addr.arpa. (45)
16:15:33.005485 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63659: 16226* 1/2/2 (160)
16:15:33.005612 IP tm.213.143.79.9.dc.telemach.net.63658 > ns1.telemach.net.domain: 16227+ PTR? 13.131.52.84.in-addr.arpa. (43)
16:15:33.015001 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4118: . ack 173 win 33580 <nop,nop,timestamp 1 130282733>
16:15:33.060997 IP host90-246.pool81116.interbusiness.it.4118 > tm.213.143.79.9.dc.telemach.net.ssh: P 173:317(144) ack 691 win 7040 <nop,nop,timestamp 130282758 1>
16:15:33.066374 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4118: P 691:1155(464) ack 317 win 33580 <nop,nop,timestamp 1 130282758>
16:15:33.070508 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63658: 16227 NXDomain 0/1/0 (98)
16:15:33.071325 IP tm.213.143.79.9.dc.telemach.net.63657 > ns1.telemach.net.domain: 16228+ PTR? 224.179.52.84.in-addr.arpa. (44)
16:15:33.125006 IP host90-246.pool81116.interbusiness.it.4118 > tm.213.143.79.9.dc.telemach.net.ssh: P 317:333(16) ack 1155 win 8320 <nop,nop,timestamp 130282764 1>
16:15:33.137216 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63657: 16228 NXDomain 0/1/0 (99)
16:15:33.137455 IP tm.213.143.79.9.dc.telemach.net.63656 > ns1.telemach.net.domain: 16229+ PTR? 159.131.52.84.in-addr.arpa. (44)
16:15:33.166037 arp who-has 84.52.179.27 tell 84.52.179.1
16:15:33.209927 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63656: 16229 NXDomain 0/1/0 (99)
16:15:33.210047 IP tm.213.143.79.9.dc.telemach.net.63655 > ns1.telemach.net.domain: 16230+ PTR? 159.94.143.213.in-addr.arpa. (45)
16:15:33.221103 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63655: 16230 NXDomain* 0/1/0 (108)
16:15:33.221279 IP tm.213.143.79.9.dc.telemach.net.63654 > ns1.telemach.net.domain: 16231+ PTR? 132.79.143.213.in-addr.arpa. (45)
16:15:33.227575 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63654: 16231* 1/2/2 (160)
16:15:33.293794 arp who-has 84.52.151.77 tell 84.52.151.1
16:15:33.325002 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4118: . ack 333 win 33580 <nop,nop,timestamp 1 130282764>
16:15:33.381237 IP host90-246.pool81116.interbusiness.it.4118 > tm.213.143.79.9.dc.telemach.net.ssh: P 333:385(52) ack 1155 win 8320 <nop,nop,timestamp 130282790 1>
16:15:33.381371 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4118: P 1155:1207(52) ack 385 win 33580 <nop,nop,timestamp 1 130282790>
16:15:33.401972 arp who-has 84.52.154.215 tell 84.52.154.1
16:15:33.431468 IP host90-246.pool81116.interbusiness.it.4118 > tm.213.143.79.9.dc.telemach.net.ssh: P 385:469(84) ack 1207 win 8320 <nop,nop,timestamp 130282795 1>
16:15:33.433412 IP tm.213.143.79.9.dc.telemach.net.63653 > ns1.telemach.net.domain: 28394+ PTR? 90.246.116.81.in-addr.arpa. (44)
16:15:33.439578 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63653: 28394 1/4/4 (241)
16:15:33.439704 IP tm.213.143.79.9.dc.telemach.net.63652 > ns1.telemach.net.domain: 28395+[|domain]
16:15:33.447027 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63652: 28395 1/2/2 (145)
16:15:33.447692 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4118: P 1207:1291(84) ack 469 win 33580 <nop,nop,timestamp 1 130282795>
16:15:33.470503 arp who-has 213.143.94.112 tell TM-94-1.telemach.net
16:15:33.490644 arp who-has 84.52.154.176 tell 84.52.154.1
16:15:33.518953 IP host90-246.pool81116.interbusiness.it.4118 > tm.213.143.79.9.dc.telemach.net.ssh: P 469:521(52) ack 1291 win 8320 <nop,nop,timestamp 130282802 1>
16:15:33.519065 IP host90-246.pool81116.interbusiness.it.4118 > tm.213.143.79.9.dc.telemach.net.ssh: F 521:521(0) ack 1291 win 8320 <nop,nop,timestamp 130282802 1>
16:15:33.519082 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4118: . ack 522 win 33580 <nop,nop,timestamp 2 130282802>
16:15:33.519430 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4118: F 1291:1291(0) ack 522 win 33580 <nop,nop,timestamp 2 130282802>
16:15:33.546983 IP host90-246.pool81116.interbusiness.it.4250 > tm.213.143.79.9.dc.telemach.net.ssh: S 2405769122:2405769122(0) win 5840 <mss 1460,sackOK,timestamp 130282807 0,nop,wscale 0>
16:15:33.547013 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4250: S 467061487:467061487(0) ack 2405769123 win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 130282807,sackOK,nop,nop>
16:15:33.565457 IP host90-246.pool81116.interbusiness.it.4118 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1292 win 8320 <nop,nop,timestamp 130282808 2>
16:15:33.595047 IP host90-246.pool81116.interbusiness.it.4250 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1 win 5840 <nop,nop,timestamp 130282811 0>
16:15:33.601699 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4250: P 1:51(50) ack 1 win 33580 <nop,nop,timestamp 0 0>
16:15:33.644596 arp who-has 213.143.94.150 tell TM-94-1.telemach.net
16:15:33.644987 arp who-has tm.213.143.84.163.dc.telemach.net tell tm.213.143.84.1.dc.telemach.net
16:15:33.647704 IP host90-246.pool81116.interbusiness.it.4250 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 51 win 5840 <nop,nop,timestamp 130282817 0>
16:15:33.647954 IP host90-246.pool81116.interbusiness.it.4250 > tm.213.143.79.9.dc.telemach.net.ssh: P 1:21(20) ack 51 win 5840 <nop,nop,timestamp 130282817 0>
16:15:33.648995 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4250: P 51:691(640) ack 21 win 33580 <nop,nop,timestamp 0 130282817>
16:15:33.667807 arp who-has 84.52.179.157 tell 84.52.179.1
16:15:33.701733 IP host90-246.pool81116.interbusiness.it.4250 > tm.213.143.79.9.dc.telemach.net.ssh: P 21:173(152) ack 691 win 7040 <nop,nop,timestamp 130282822 0>
16:15:33.864613 arp who-has 84.52.179.8 tell 84.52.179.1
16:15:33.883780 arp who-has 84.52.154.58 tell 84.52.154.1
16:15:33.895014 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4250: . ack 173 win 33580 <nop,nop,timestamp 0 130282822>
16:15:33.941817 IP host90-246.pool81116.interbusiness.it.4250 > tm.213.143.79.9.dc.telemach.net.ssh: P 173:317(144) ack 691 win 7040 <nop,nop,timestamp 130282846 0>
16:15:33.947158 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4250: P 691:1155(464) ack 317 win 33580 <nop,nop,timestamp 0 130282846>
16:15:34.005610 IP host90-246.pool81116.interbusiness.it.4250 > tm.213.143.79.9.dc.telemach.net.ssh: P 317:333(16) ack 1155 win 8320 <nop,nop,timestamp 130282852 0>
16:15:34.205020 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4250: . ack 333 win 33580 <nop,nop,timestamp 1 130282852>
16:15:34.225154 IP tm.213.143.79.9.dc.telemach.net.63651 > ns1.telemach.net.domain: 16232+ PTR? 142.131.52.84.in-addr.arpa. (44)
16:15:34.255866 IP host90-246.pool81116.interbusiness.it.4250 > tm.213.143.79.9.dc.telemach.net.ssh: P 333:385(52) ack 1155 win 8320 <nop,nop,timestamp 130282877 1>
16:15:34.256004 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4250: P 1155:1207(52) ack 385 win 33580 <nop,nop,timestamp 1 130282877>
16:15:34.284524 arp who-has tm.213.143.79.200.dc.telemach.net tell tm.213.143.79.1.dc.telemach.net
16:15:34.284913 arp who-has 84.52.131.53 tell 84.52.131.1
16:15:34.289792 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63651: 16232 NXDomain 0/1/0 (99)
16:15:34.290062 IP tm.213.143.79.9.dc.telemach.net.63650 > ns1.telemach.net.domain: 16233+ PTR? 27.179.52.84.in-addr.arpa. (43)
16:15:34.295557 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63650: 16233 NXDomain 0/1/0 (98)
16:15:34.295801 IP tm.213.143.79.9.dc.telemach.net.63649 > ns1.telemach.net.domain: 16234+ PTR? 112.94.143.213.in-addr.arpa. (45)
16:15:34.302448 IP host90-246.pool81116.interbusiness.it.4250 > tm.213.143.79.9.dc.telemach.net.ssh: P 385:469(84) ack 1207 win 8320 <nop,nop,timestamp 130282882 1>
16:15:34.303132 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63649: 16234 NXDomain* 0/1/0 (108)
16:15:34.303231 IP tm.213.143.79.9.dc.telemach.net.63648 > ns1.telemach.net.domain: 16235+ PTR? 176.154.52.84.in-addr.arpa. (44)
16:15:34.304505 IP tm.213.143.79.9.dc.telemach.net.63647 > ns1.telemach.net.domain: 20790+ PTR? 90.246.116.81.in-addr.arpa. (44)
16:15:34.307972 arp who-has 84.52.179.87 tell 84.52.179.1
16:15:34.311254 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63648: 16235 NXDomain 0/1/0 (99)
16:15:34.311518 IP tm.213.143.79.9.dc.telemach.net.63646 > ns1.telemach.net.domain: 16236+ PTR? 150.94.143.213.in-addr.arpa. (45)
16:15:34.312001 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63647: 20790 1/4/4 (241)
16:15:34.312154 IP tm.213.143.79.9.dc.telemach.net.63645 > ns1.telemach.net.domain: 20791+[|domain]
16:15:34.317640 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63646: 16236 NXDomain* 0/1/0 (108)
16:15:34.317695 IP tm.213.143.79.9.dc.telemach.net.63644 > ns1.telemach.net.domain: 16237+ PTR? 163.84.143.213.in-addr.arpa. (45)
16:15:34.317797 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63645: 20791 1/2/2 (145)
16:15:34.318479 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4250: P 1207:1291(84) ack 469 win 33580 <nop,nop,timestamp 1 130282882>
16:15:34.323237 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63644: 16237* 1/2/2 (160)
16:15:34.323394 IP tm.213.143.79.9.dc.telemach.net.63643 > ns1.telemach.net.domain: 16238+ PTR? 8.179.52.84.in-addr.arpa. (42)
16:15:34.329247 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63643: 16238 NXDomain 0/1/0 (97)
16:15:34.329299 IP tm.213.143.79.9.dc.telemach.net.63642 > ns1.telemach.net.domain: 16239+ PTR? 58.154.52.84.in-addr.arpa. (43)
16:15:34.335136 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63642: 16239 NXDomain 0/1/0 (98)
16:15:34.367315 IP host90-246.pool81116.interbusiness.it.4250 > tm.213.143.79.9.dc.telemach.net.ssh: P 469:521(52) ack 1291 win 8320 <nop,nop,timestamp 130282889 1>
16:15:34.367727 IP host90-246.pool81116.interbusiness.it.4250 > tm.213.143.79.9.dc.telemach.net.ssh: F 521:521(0) ack 1291 win 8320 <nop,nop,timestamp 130282889 1>
16:15:34.367745 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4250: . ack 522 win 33580 <nop,nop,timestamp 1 130282889>
16:15:34.367790 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4250: F 1291:1291(0) ack 522 win 33580 <nop,nop,timestamp 1 130282889>
16:15:34.368395 arp who-has 213.143.94.103 tell TM-94-1.telemach.net
16:15:34.397851 IP host90-246.pool81116.interbusiness.it.4256 > tm.213.143.79.9.dc.telemach.net.ssh: S 2406637290:2406637290(0) win 5840 <mss 1460,sackOK,timestamp 130282892 0,nop,wscale 0>
16:15:34.397886 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4256: S 491058061:491058061(0) ack 2406637291 win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 130282892,sackOK,nop,nop>
16:15:34.411084 arp who-has 84.52.154.209 tell 84.52.154.1
16:15:34.416330 IP host90-246.pool81116.interbusiness.it.4250 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1292 win 8320 <nop,nop,timestamp 130282893 1>
16:15:34.441251 IP host90-246.pool81116.interbusiness.it.4256 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1 win 5840 <nop,nop,timestamp 130282896 0>
16:15:34.447591 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4256: P 1:51(50) ack 1 win 33580 <nop,nop,timestamp 0 0>
16:15:34.505277 IP host90-246.pool81116.interbusiness.it.4256 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 51 win 5840 <nop,nop,timestamp 130282901 0>
16:15:34.505377 arp who-has 213.143.94.159 tell TM-94-1.telemach.net
16:15:34.506204 IP host90-246.pool81116.interbusiness.it.4256 > tm.213.143.79.9.dc.telemach.net.ssh: P 1:21(20) ack 51 win 5840 <nop,nop,timestamp 130282901 0>
16:15:34.507246 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4256: P 51:691(640) ack 21 win 33580 <nop,nop,timestamp 0 130282901>
16:15:34.539925 arp who-has 84.52.179.177 tell 84.52.179.1
16:15:34.572076 IP host90-246.pool81116.interbusiness.it.4256 > tm.213.143.79.9.dc.telemach.net.ssh: P 21:173(152) ack 691 win 7040 <nop,nop,timestamp 130282909 0>
16:15:34.662391 arp who-has 84.52.151.43 tell 84.52.151.1
16:15:34.765028 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4256: . ack 173 win 33580 <nop,nop,timestamp 1 130282909>
16:15:34.812950 IP host90-246.pool81116.interbusiness.it.4256 > tm.213.143.79.9.dc.telemach.net.ssh: P 173:317(144) ack 691 win 7040 <nop,nop,timestamp 130282933 1>
16:15:34.818760 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4256: P 691:1155(464) ack 317 win 33580 <nop,nop,timestamp 1 130282933>
16:15:34.829209 arp who-has 84.52.171.151 tell 84.52.171.1
16:15:34.861012 arp who-has 84.52.179.224 tell 84.52.179.1
16:15:34.869624 arp who-has 84.52.151.2 tell 84.52.151.1
16:15:34.876332 IP host90-246.pool81116.interbusiness.it.4256 > tm.213.143.79.9.dc.telemach.net.ssh: P 317:333(16) ack 1155 win 8320 <nop,nop,timestamp 130282939 1>
16:15:34.893630 arp who-has 84.52.151.197 tell 84.52.151.1
16:15:35.075032 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4256: . ack 333 win 33580 <nop,nop,timestamp 2 130282939>
16:15:35.121816 IP host90-246.pool81116.interbusiness.it.4256 > tm.213.143.79.9.dc.telemach.net.ssh: P 333:385(52) ack 1155 win 8320 <nop,nop,timestamp 130282964 2>
16:15:35.121952 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4256: P 1155:1207(52) ack 385 win 33580 <nop,nop,timestamp 2 130282964>
16:15:35.166927 IP host90-246.pool81116.interbusiness.it.4256 > tm.213.143.79.9.dc.telemach.net.ssh: P 385:469(84) ack 1207 win 8320 <nop,nop,timestamp 130282969 2>
16:15:35.168877 IP tm.213.143.79.9.dc.telemach.net.63641 > ns1.telemach.net.domain: 25374+ PTR? 90.246.116.81.in-addr.arpa. (44)
16:15:35.175608 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63641: 25374 1/4/4 (241)
16:15:35.175733 IP tm.213.143.79.9.dc.telemach.net.63640 > ns1.telemach.net.domain: 25375+[|domain]
16:15:35.181348 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63640: 25375 1/2/2 (145)
16:15:35.181994 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4256: P 1207:1291(84) ack 469 win 33580 <nop,nop,timestamp 2 130282969>
16:15:35.217409 arp who-has 213.143.94.95 tell TM-94-1.telemach.net
16:15:35.232261 IP host90-246.pool81116.interbusiness.it.4256 > tm.213.143.79.9.dc.telemach.net.ssh: P 469:521(52) ack 1291 win 8320 <nop,nop,timestamp 130282975 2>
16:15:35.232714 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4256: F 1291:1291(0) ack 521 win 33580 <nop,nop,timestamp 2 130282975>
16:15:35.232832 IP host90-246.pool81116.interbusiness.it.4256 > tm.213.143.79.9.dc.telemach.net.ssh: F 521:521(0) ack 1291 win 8320 <nop,nop,timestamp 130282975 2>
16:15:35.232843 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4256: . ack 522 win 33580 <nop,nop,timestamp 2 130282975>
16:15:35.262907 IP host90-246.pool81116.interbusiness.it.4339 > tm.213.143.79.9.dc.telemach.net.ssh: S 2400307953:2400307953(0) win 5840 <mss 1460,sackOK,timestamp 130282978 0,nop,wscale 0>
16:15:35.262945 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4339: S 550594622:550594622(0) ack 2400307954 win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 130282978,sackOK,nop,nop>
16:15:35.291840 IP host90-246.pool81116.interbusiness.it.4256 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1292 win 8320 <nop,nop,timestamp 130282981 2>
16:15:35.312627 IP host90-246.pool81116.interbusiness.it.4339 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1 win 5840 <nop,nop,timestamp 130282983 0>
16:15:35.319762 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4339: P 1:51(50) ack 1 win 33580 <nop,nop,timestamp 0 0>
16:15:35.335468 IP tm.213.143.79.9.dc.telemach.net.63639 > ns1.telemach.net.domain: 16240+ PTR? 103.94.143.213.in-addr.arpa. (45)
16:15:35.341273 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63639: 16240 NXDomain* 0/1/0 (108)
16:15:35.341552 IP tm.213.143.79.9.dc.telemach.net.63638 > ns1.telemach.net.domain: 16241+ PTR? 177.179.52.84.in-addr.arpa. (44)
16:15:35.368007 IP host90-246.pool81116.interbusiness.it.4339 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 51 win 5840 <nop,nop,timestamp 130282989 0>
16:15:35.368126 IP host90-246.pool81116.interbusiness.it.4339 > tm.213.143.79.9.dc.telemach.net.ssh: P 1:21(20) ack 51 win 5840 <nop,nop,timestamp 130282989 0>
16:15:35.369178 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4339: P 51:691(640) ack 21 win 33580 <nop,nop,timestamp 0 130282989>
16:15:35.409115 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63638: 16241 NXDomain 0/1/0 (99)
16:15:35.409312 IP tm.213.143.79.9.dc.telemach.net.63637 > ns1.telemach.net.domain: 16242+ PTR? 151.171.52.84.in-addr.arpa. (44)
16:15:35.427086 IP host90-246.pool81116.interbusiness.it.4339 > tm.213.143.79.9.dc.telemach.net.ssh: P 21:173(152) ack 691 win 7040 <nop,nop,timestamp 130282994 0>
16:15:35.457130 arp who-has 84.52.154.241 tell 84.52.154.1
16:15:35.478386 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63637: 16242 NXDomain 0/1/0 (99)
16:15:35.478673 IP tm.213.143.79.9.dc.telemach.net.63636 > ns1.telemach.net.domain: 16243+ PTR? 95.94.143.213.in-addr.arpa. (44)
16:15:35.483188 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63636: 16243 NXDomain* 0/1/0 (107)
16:15:35.625041 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4339: . ack 173 win 33580 <nop,nop,timestamp 1 130282994>
16:15:35.673444 IP host90-246.pool81116.interbusiness.it.4339 > tm.213.143.79.9.dc.telemach.net.ssh: P 173:317(144) ack 691 win 7040 <nop,nop,timestamp 130283019 1>
16:15:35.679163 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4339: P 691:1155(464) ack 317 win 33580 <nop,nop,timestamp 1 130283019>
16:15:35.736666 IP host90-246.pool81116.interbusiness.it.4339 > tm.213.143.79.9.dc.telemach.net.ssh: P 317:333(16) ack 1155 win 8320 <nop,nop,timestamp 130283026 1>
16:15:35.784487 arp who-has tm.213.143.84.164.dc.telemach.net tell tm.213.143.84.1.dc.telemach.net
16:15:35.836777 arp who-has 84.52.131.141 tell 84.52.131.1
16:15:35.855505 arp who-has tm.213.143.84.184.dc.telemach.net tell tm.213.143.84.1.dc.telemach.net
16:15:35.935043 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4339: . ack 333 win 33580 <nop,nop,timestamp 1 130283026>
16:15:35.982653 IP host90-246.pool81116.interbusiness.it.4339 > tm.213.143.79.9.dc.telemach.net.ssh: P 333:385(52) ack 1155 win 8320 <nop,nop,timestamp 130283050 1>
16:15:35.982787 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4339: P 1155:1207(52) ack 385 win 33580 <nop,nop,timestamp 1 130283050>
16:15:36.028426 IP host90-246.pool81116.interbusiness.it.4339 > tm.213.143.79.9.dc.telemach.net.ssh: P 385:469(84) ack 1207 win 8320 <nop,nop,timestamp 130283055 1>
16:15:36.030390 IP tm.213.143.79.9.dc.telemach.net.63635 > ns1.telemach.net.domain: 34566+ PTR? 90.246.116.81.in-addr.arpa. (44)
16:15:36.037422 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63635: 34566 1/4/4 (241)
16:15:36.037605 IP tm.213.143.79.9.dc.telemach.net.63634 > ns1.telemach.net.domain: 34567+[|domain]
16:15:36.045163 IP ns1.telemach.net.domain > tm.213.143.79.9.dc.telemach.net.63634: 34567 1/2/2 (145)
16:15:36.046176 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4339: P 1207:1291(84) ack 469 win 33580 <nop,nop,timestamp 2 130283055>
16:15:36.100933 arp who-has 84.52.179.27 tell 84.52.179.1
16:15:36.107358 IP host90-246.pool81116.interbusiness.it.4339 > tm.213.143.79.9.dc.telemach.net.ssh: P 469:521(52) ack 1291 win 8320 <nop,nop,timestamp 130283062 2>
16:15:36.107472 IP host90-246.pool81116.interbusiness.it.4339 > tm.213.143.79.9.dc.telemach.net.ssh: F 521:521(0) ack 1291 win 8320 <nop,nop,timestamp 130283062 2>
16:15:36.107487 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4339: . ack 522 win 33580 <nop,nop,timestamp 2 130283062>
16:15:36.107833 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4339: F 1291:1291(0) ack 522 win 33580 <nop,nop,timestamp 2 130283062>
16:15:36.125116 arp who-has 84.52.151.77 tell 84.52.151.1
16:15:36.137541 IP host90-246.pool81116.interbusiness.it.4426 > tm.213.143.79.9.dc.telemach.net.ssh: S 2412261602:2412261602(0) win 5840 <mss 1460,sackOK,timestamp 130283066 0,nop,wscale 0>
16:15:36.137576 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4426: S 600828888:600828888(0) ack 2412261603 win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 130283066,sackOK,nop,nop>
16:15:36.141050 arp who-has 84.52.131.167 tell 84.52.131.1
16:15:36.153216 IP host90-246.pool81116.interbusiness.it.4339 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1292 win 8320 <nop,nop,timestamp 130283067 2>
16:15:36.182026 IP host90-246.pool81116.interbusiness.it.4426 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 1 win 5840 <nop,nop,timestamp 130283070 0>
16:15:36.188344 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4426: P 1:51(50) ack 1 win 33580 <nop,nop,timestamp 0 0>
16:15:36.214556 arp who-has 84.52.154.175 tell 84.52.154.1
16:15:36.237051 IP host90-246.pool81116.interbusiness.it.4426 > tm.213.143.79.9.dc.telemach.net.ssh: . ack 51 win 5840 <nop,nop,timestamp 130283076 0>
16:15:36.237169 IP host90-246.pool81116.interbusiness.it.4426 > tm.213.143.79.9.dc.telemach.net.ssh: P 1:21(20) ack 51 win 5840 <nop,nop,timestamp 130283076 0>
16:15:36.238213 IP tm.213.143.79.9.dc.telemach.net.ssh > host90-246.pool81116.interbusiness.it.4426: P 51:691(640) ack 21 win 33580 <nop,nop,timestamp 0 130283076>
16:15:36.293583 IP host90-246.pool81116.interbusiness.it.4426 > tm.213.143.79.9.dc.telemach.net.ssh: P 21:173(152) ack 691 win 7040 <nop,nop,timestamp 130283081 0>
16:15:36.299988 arp who-has 84.52.131.142 tell 84.52.131.1
16:15:36.455646 arp who-has 213.143.94.112 tell TM-94-1.telemach.net
------=_Part_6756_11983611.1139671737342--