Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Limiter not work correct on second nic

    Scheduled Pinned Locked Moved Traffic Shaping
    10 Posts 2 Posters 5.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • savagoS
      savago
      last edited by

      In my network where wan is fxp0,lan is stge0 and opt1 is rl0 ( second lan)
      limiter not work correct on second lan nic (rl0) and client get full speed.

      
      fxp0@pci0:0:13:0:	class=0x020000 card=0x000c8086 chip=0x12298086 rev=0x08 hdr=0x00
          class      = network
          subclass   = ethernet
          cap 01[dc] = powerspec 2  supports D0 D1 D2 D3  current D0
      stge0@pci0:0:14:0:	class=0x020000 card=0x81801043 chip=0x102313f0 rev=0x41 hdr=0x00
          class      = network
          subclass   = ethernet
          cap 01[50] = powerspec 2  supports D0 D1 D2 D3  current D0
      rl0@pci0:0:15:0:	class=0x020000 card=0x813910ec chip=0x813910ec rev=0x10 hdr=0x00
          class      = network
          subclass   = ethernet
          cap 01[50] = powerspec 2  supports D0 D1 D2 D3  current D0
      
      
      fxp0: flags=8843 <up,broadcast,running,simplex,multicast>metric 0 mtu 1500
      	options=2009 <rxcsum,vlan_mtu,wol_magic>ether 4c:00:10:54:46:32
      	inet 1.2.3.4 netmask 0xffffff00 broadcast 1.2.3.255
      	inet6 fe80::4e00:10ff:fe54:4632%fxp0 prefixlen 64 scopeid 0x1 
      	nd6 options=3 <performnud,accept_rtadv>media: Ethernet autoselect (100baseTX <full-duplex>)
      	status: active
      stge0: flags=8843 <up,broadcast,running,simplex,multicast>metric 0 mtu 1500
      	options=8209b <rxcsum,txcsum,vlan_mtu,vlan_hwtagging,vlan_hwcsum,wol_magic,linkstate>ether 00:1d:60:5c:e5:76
      	inet 172.17.250.1 netmask 0xfffffff0 broadcast 172.17.250.15
      	inet6 fe80::21d:60ff:fe5c:e576%stge0 prefixlen 64 scopeid 0x2 
      	nd6 options=3 <performnud,accept_rtadv>media: Ethernet autoselect (100baseTX <full-duplex>)
      	status: active
      rl0: flags=8843 <up,broadcast,running,simplex,multicast>metric 0 mtu 1500
      	options=8 <vlan_mtu>ether 00:e0:4c:51:bc:60
      	inet 192.168.0.254 netmask 0xffffff00 broadcast 192.168.0.255
      	inet6 fe80::2e0:4cff:fe51:bc60%rl0 prefixlen 64 scopeid 0x3 
      	nd6 options=3 <performnud,accept_rtadv>media: Ethernet autoselect (100baseTX <full-duplex>)
      	status: active</full-duplex></performnud,accept_rtadv></vlan_mtu></up,broadcast,running,simplex,multicast></full-duplex></performnud,accept_rtadv></rxcsum,txcsum,vlan_mtu,vlan_hwtagging,vlan_hwcsum,wol_magic,linkstate></up,broadcast,running,simplex,multicast></full-duplex></performnud,accept_rtadv></rxcsum,vlan_mtu,wol_magic></up,broadcast,running,simplex,multicast> 
      
      
      cat rules.limiter
      
      pipe 1 config  bw 5120Kb mask src-ip 0xffffffff 
      
      pipe 2 config  bw 10240Kb mask dst-ip 0xffffffff 
      
      pipe 3 config  bw 2048Kb mask src-ip 0xffffffff 
      
      pipe 4 config  bw 2048Kb mask dst-ip 0xffffffff 
      
      
      
      ipfw pipe list
      00001:   5.120 Mbit/s    0 ms burst 0 
      q131073  50 sl. 0 flows (1 buckets) sched 65537 weight 0 lmax 0 pri 0 droptail
       sched 65537 type FIFO flags 0x1 64 buckets 3 active
          mask:  0x00 0xffffffff/0x0000 -> 0x00000000/0x0000
      BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp
       13 ip     172.17.250.14/0             0.0.0.0/0        6      662  0    0   0
       25 ip      172.17.250.4/0             0.0.0.0/0        1       76  0    0   0
       29 ip      172.17.250.6/0             0.0.0.0/0        4      176  0    0   0
      00002:  10.240 Mbit/s    0 ms burst 0 
      q131074  50 sl. 0 flows (1 buckets) sched 65538 weight 0 lmax 0 pri 0 droptail
       sched 65538 type FIFO flags 0x1 64 buckets 2 active
          mask:  0x00 0x00000000/0x0000 -> 0xffffffff/0x0000
      BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp
       37 ip           0.0.0.0/0        172.17.250.6/0        4      176  0    0   0
       45 ip           0.0.0.0/0       172.17.250.14/0        5     2981  0    0   0
      00003:   2.048 Mbit/s    0 ms burst 0 
      q131075  50 sl. 0 flows (1 buckets) sched 65539 weight 0 lmax 0 pri 0 droptail
       sched 65539 type FIFO flags 0x1 64 buckets 1 active
          mask:  0x00 0xffffffff/0x0000 -> 0x00000000/0x0000
      BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp
      174 ip       192.168.0.3/0             0.0.0.0/0     3265   192854  0    0   0
      00004:   2.048 Mbit/s    0 ms burst 0 
      q131076  50 sl. 0 flows (1 buckets) sched 65540 weight 0 lmax 0 pri 0 droptail
       sched 65540 type FIFO flags 0x1 64 buckets 1 active
          mask:  0x00 0x00000000/0x0000 -> 0xffffffff/0x0000
      BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp
       83 ip           0.0.0.0/0         192.168.0.3/0     6458  7770058  5 4608   0
      
      

      limiter.png
      limiter.png_thumb

      Sys 2.0-RC1: Intel Atom N330 Dual Core @1.6 2048M Ram 40GHD

      1 Reply Last reply Reply Quote 0
      • savagoS
        savago
        last edited by

        this is limiter rule on rl0 ( pic)

        
        pfctl -sn
        no nat proto carp all
        nat-anchor "natearly/*" all
        nat-anchor "natrules/*" all
        nat on fxp0 inet from 172.17.250.0/28 port = isakmp to any port = isakmp -> 87.120.x.y port 500
        nat on fxp0 inet from 192.168.0.0/24 port = isakmp to any port = isakmp -> 87.120.x.y  port 500
        nat on fxp0 inet from 127.0.0.0/8 port = isakmp to any port = isakmp -> 87.120.x.y port 500
        nat on fxp0 inet from 172.17.250.0/28 to any -> 87.120.x.yport 1024:65535
        nat on fxp0 inet from 192.168.0.0/24 to any -> 87.120.x.y port 1024:65535
        nat on fxp0 inet from 127.0.0.0/8 to any -> 87.120.x.y port 1024:65535
        no rdr proto carp all
        rdr-anchor "relayd/*" all
        rdr-anchor "tftp-proxy/*" all
        rdr on fxp0 inet proto tcp from any to 87.120.x.y port = commplex-link -> 172.17.250.5
        rdr on fxp0 inet proto udp from any to 87.120.x.y port = commplex-link -> 172.17.250.5
        rdr on fxp0 inet proto tcp from any to 87.120.x.y port = 51413 -> 172.17.250.5
        rdr on fxp0 inet proto udp from any to 87.120.x.y port = 51413 -> 172.17.250.5
        rdr-anchor "miniupnpd" all
        
        
        
         pfctl -sr
        ...
        pass in quick on stge0 inet from 172.17.250.0/28 to any flags S/SA keep state label "USER_RULE: Default allow LAN to any rule" dnpipe(1, 2)
        pass in quick on rl0 inet from 192.168.0.0/24 to any flags S/SA keep state label "USER_RULE" dnpipe(3, 4)
        anchor "tftp-proxy/*" all
        anchor "miniupnpd" all
        
        

        limiter-rule.png
        limiter-rule.png_thumb

        Sys 2.0-RC1: Intel Atom N330 Dual Core @1.6 2048M Ram 40GHD

        1 Reply Last reply Reply Quote 0
        • marcellocM
          marcelloc
          last edited by

          Do you have any other machines using this links?

          Can you test it with any console tool(like tcpdump or iftop) to check it?

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • savagoS
            savago
            last edited by

            @marcelloc:

            Co you have any other machines using this links?

            Can you test it with any console tool(like tcpdump or iftop) to check it?

            More info, LAN nic (stge0) is used for ethernet users,OPT1 nic (rl0) is used for wi-fi users through bridged AP ( bridged  wan and wlan ports on routerstation ).
            I use this network sheme for separate speeds (up/down) on ALL  ethernet and wi-fi connected  users  (see pipe 1/2  and 3/4 in first post) assigned on Lan subnet / OPT1 subnet in firewall rules.

            What to test with tcpdump,iperf ?!
            I test with iperf/transmission from user machine.

            Sys 2.0-RC1: Intel Atom N330 Dual Core @1.6 2048M Ram 40GHD

            1 Reply Last reply Reply Quote 0
            • marcellocM
              marcelloc
              last edited by

              Are you still on 2.0rc1? If so, the first thing to try is an upgrade to 2.0.1

              The console test was just to be sure you are getting only test traffic on you graph.

              Tcpdump will show all packates. This way you can see if It's a limiter issue or just traffic from other machines.

              Treinamentos de Elite: http://sys-squad.com

              Help a community developer! ;D

              1 Reply Last reply Reply Quote 0
              • savagoS
                savago
                last edited by

                @marcelloc:

                Are you still on 2.0rc1? If so, the first thing to try is an upgrade to 2.0.1

                The console test was just to be sure you are getting only test traffic on you graph.

                Tcpdump will show all packates. This way you can see if It's a limiter issue or just traffic from other machines.

                Well

                
                2.0.1-RELEASE (i386)
                built on Wed Dec 14 11:44:13 EST 2011
                FreeBSD 8.1-RELEASE-p6
                You are on the latest version.
                
                

                I can't understand what to look with tcpdump on rl0 ,can you hint me ?

                
                tcpdump -veni rl0
                tcpdump: listening on rl0, link-type EN10MB (Ethernet), capture size 96 bytes
                13:22:09.744281 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32050, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 218.94.54.170.45328: UDP, length 103
                13:22:09.746146 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32051, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 79.21.254.162.21486: UDP, length 103
                13:22:09.746202 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32052, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 120.28.241.126.4267: UDP, length 103
                13:22:09.746246 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32053, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 183.83.213.47.9721: UDP, length 103
                13:22:09.746290 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32054, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 67.215.242.138.6881: UDP, length 103
                13:22:09.746336 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32055, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 94.198.234.86.31184: UDP, length 103
                13:22:09.746383 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32056, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 188.254.202.176.54895: UDP, length 103
                13:22:09.746424 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32057, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 212.233.203.139.14619: UDP, length 103
                13:22:10.114074 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 62: (tos 0x0, ttl 128, id 32058, offset 0, flags [DF], proto TCP (6), length 48)
                    192.168.0.14.44515 > 78.189.153.237.28931: Flags [S.], cksum 0x8096 (correct), seq 1493898671, ack 3281577949, win 8192, options [mss 1460,nop,nop,sackOK], length 0
                13:22:10.731320 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32059, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 62.65.242.246.31931: UDP, length 103
                13:22:10.731638 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32060, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 77.91.198.111.26288: UDP, length 103
                13:22:10.731712 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 329: (tos 0x4, ttl 255, id 35916, offset 0, flags [none], proto UDP (17), length 315)
                    188.254.202.176.54895 > 192.168.0.14.44515: UDP, length 287
                13:22:10.731725 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 329: (tos 0x4, ttl 255, id 59381, offset 0, flags [none], proto UDP (17), length 315)
                    212.233.203.139.14619 > 192.168.0.14.44515: UDP, length 287
                13:22:10.731735 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 329: (tos 0x8, ttl 255, id 8272, offset 0, flags [none], proto UDP (17), length 315)
                    94.198.234.86.31184 > 192.168.0.14.44515: UDP, length 287
                13:22:10.731744 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 135: (tos 0x4, ttl 255, id 14464, offset 0, flags [none], proto UDP (17), length 121)
                    46.55.180.197.37816 > 192.168.0.14.30250: UDP, length 93
                13:22:10.731767 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 319: (tos 0x8, ttl 255, id 0, offset 0, flags [DF], proto UDP (17), length 305)
                    67.215.242.138.6881 > 192.168.0.14.44515: UDP, length 277
                13:22:10.731799 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 310: (tos 0x8, ttl 255, id 26194, offset 0, flags [none], proto UDP (17), length 296)
                    183.83.213.47.9721 > 192.168.0.14.44515: UDP, length 268
                13:22:10.731818 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 66: (tos 0x8, ttl 255, id 31865, offset 0, flags [DF], proto TCP (6), length 52)
                    78.189.153.237.28931 > 192.168.0.14.44515: Flags [.], cksum 0xbd3d (correct), ack 1, win 64400, options [nop,nop,sack 1 {0:1}], length 0
                13:22:10.731836 00:e0:4c:51:bc:60 > c4:46:19:49:94:ba, ethertype IPv4 (0x0800), length 98: (tos 0x8, ttl 255, id 32266, offset 0, flags [none], proto UDP (17), length 84)
                    94.245.121.251.3544 > 192.168.0.15.49688: UDP, length 56
                13:22:10.733427 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32061, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 123.202.131.117.63903: UDP, length 103
                13:22:10.734069 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32062, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 80.89.199.90.18691: UDP, length 103
                13:22:10.734163 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32063, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 122.29.137.124.53778: UDP, length 103
                13:22:10.734206 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32064, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 108.161.113.115.55698: UDP, length 103
                13:22:10.734553 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32065, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 67.176.170.167.62217: UDP, length 103
                13:22:10.737114 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 132: (tos 0x0, ttl 128, id 32066, offset 0, flags [none], proto UDP (17), length 118)
                    192.168.0.14.30250 > 46.55.180.197.37816: UDP, length 90
                13:22:10.821013 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 319: (tos 0x8, ttl 255, id 62457, offset 0, flags [none], proto UDP (17), length 305)
                    62.65.242.246.31931 > 192.168.0.14.44515: UDP, length 277
                13:22:10.822587 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32067, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 124.226.170.246.16001: UDP, length 103
                13:22:10.908166 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 329: (tos 0x8, ttl 255, id 2381, offset 0, flags [none], proto UDP (17), length 315)
                    80.89.199.90.18691 > 192.168.0.14.44515: UDP, length 287
                13:22:10.909549 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32068, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 82.232.45.29.17547: UDP, length 103
                13:22:10.916560 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 329: (tos 0x8, ttl 255, id 16143, offset 0, flags [DF], proto UDP (17), length 315)
                    108.161.113.115.55698 > 192.168.0.14.44515: UDP, length 287
                13:22:10.917773 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32069, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 75.189.228.236.31899: UDP, length 103
                13:22:11.068036 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 319: (tos 0x8, ttl 255, id 47693, offset 0, flags [none], proto UDP (17), length 305)
                    122.29.137.124.53778 > 192.168.0.14.44515: UDP, length 277
                13:22:11.069398 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32070, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 77.121.255.28.54554: UDP, length 103
                13:22:11.080540 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 329: (tos 0x8, ttl 255, id 25664, offset 0, flags [none], proto UDP (17), length 315)
                    75.189.228.236.31899 > 192.168.0.14.44515: UDP, length 287
                13:22:11.097867 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32071, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 176.103.206.244.55298: UDP, length 103
                13:22:11.157437 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 329: (tos 0x8, ttl 255, id 58877, offset 0, flags [none], proto UDP (17), length 315)
                    77.121.255.28.54554 > 192.168.0.14.44515: UDP, length 287
                13:22:11.163083 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32072, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 109.200.244.203.18944: UDP, length 103
                13:22:11.240918 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 329: (tos 0x8, ttl 255, id 8757, offset 0, flags [none], proto UDP (17), length 315)
                    109.200.244.203.18944 > 192.168.0.14.44515: UDP, length 287
                13:22:11.242801 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32073, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 24.212.97.6.35697: UDP, length 103
                13:22:11.463858 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 329: (tos 0x8, ttl 255, id 5622, offset 0, flags [none], proto UDP (17), length 315)
                    24.212.97.6.35697 > 192.168.0.14.44515: UDP, length 287
                13:22:11.491307 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32074, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 95.238.91.103.58500: UDP, length 103
                13:22:11.743999 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32075, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 86.28.253.119.44002: UDP, length 103
                13:22:11.746626 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32076, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 81.24.208.68.57134: UDP, length 103
                13:22:11.811294 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 329: (tos 0x8, ttl 255, id 18895, offset 0, flags [none], proto UDP (17), length 315)
                    86.28.253.119.44002 > 192.168.0.14.44515: UDP, length 287
                13:22:11.829892 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 70: (tos 0x8, ttl 255, id 29908, offset 0, flags [none], proto ICMP (1), length 56)
                    81.24.208.68 > 192.168.0.14: ICMP 81.24.208.68 udp port 57134 unreachable, length 36
                	(tos 0x0, ttl 247, id 32076, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 81.24.208.68.57134: UDP, length 103
                13:22:11.889051 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 77: (tos 0x0, ttl 128, id 32077, offset 0, flags [none], proto UDP (17), length 63)
                    192.168.0.14.30250 > 111.221.74.33.40043: UDP, length 35
                13:22:11.889794 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 77: (tos 0x0, ttl 128, id 32078, offset 0, flags [none], proto UDP (17), length 63)
                    192.168.0.14.30250 > 151.28.68.17.45036: UDP, length 35
                13:22:11.889821 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 77: (tos 0x0, ttl 128, id 32079, offset 0, flags [none], proto UDP (17), length 63)
                    192.168.0.14.30250 > 169.231.5.136.52687: UDP, length 35
                13:22:11.962903 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 521: (tos 0x8, ttl 255, id 1095, offset 0, flags [none], proto UDP (17), length 507)
                    151.28.68.17.45036 > 192.168.0.14.30250: UDP, length 479
                13:22:11.967300 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 78: (tos 0x0, ttl 128, id 32080, offset 0, flags [none], proto UDP (17), length 64)
                    192.168.0.14.30250 > 79.125.151.20.27958: UDP, length 36
                13:22:12.031855 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 60: (tos 0x4, ttl 255, id 57855, offset 0, flags [none], proto UDP (17), length 46)
                    79.125.151.20.27958 > 192.168.0.14.30250: UDP, length 18
                13:22:12.033515 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 78: (tos 0x0, ttl 128, id 32081, offset 0, flags [none], proto UDP (17), length 64)
                    192.168.0.14.30250 > 142.166.201.194.50981: UDP, length 36
                13:22:12.079164 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 521: (tos 0x8, ttl 255, id 11275, offset 0, flags [none], proto UDP (17), length 507)
                    169.231.5.136.52687 > 192.168.0.14.30250: UDP, length 479
                13:22:12.086065 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 78: (tos 0x0, ttl 128, id 32082, offset 0, flags [none], proto UDP (17), length 64)
                    192.168.0.14.30250 > 89.143.118.184.30773: UDP, length 36
                13:22:12.182946 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 521: (tos 0x8, ttl 255, id 19780, offset 0, flags [none], proto UDP (17), length 507)
                    89.143.118.184.30773 > 192.168.0.14.30250: UDP, length 479
                13:22:12.187459 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 79: (tos 0x0, ttl 128, id 32083, offset 0, flags [none], proto UDP (17), length 65)
                    192.168.0.14.30250 > 213.199.179.146.40039: UDP, length 37
                13:22:12.191613 00:e0:4c:51:bc:60 > c4:46:19:49:94:ba, ethertype IPv4 (0x0800), length 98: (tos 0x8, ttl 255, id 23151, offset 0, flags [none], proto UDP (17), length 84)
                    94.245.121.251.3544 > 192.168.0.15.49688: UDP, length 56
                13:22:12.215943 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 60: (tos 0x8, ttl 255, id 22042, offset 0, flags [none], proto UDP (17), length 46)
                    142.166.201.194.50981 > 192.168.0.14.30250: UDP, length 18
                13:22:12.217310 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 79: (tos 0x0, ttl 128, id 32084, offset 0, flags [none], proto UDP (17), length 65)
                    192.168.0.14.30250 > 46.73.213.111.3167: UDP, length 37
                13:22:12.229881 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 62: (tos 0x8, ttl 255, id 0, offset 0, flags [DF], proto UDP (17), length 48)
                    213.199.179.146.40039 > 192.168.0.14.30250: UDP, length 20
                13:22:12.241174 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 533: (tos 0x8, ttl 255, id 0, offset 0, flags [DF], proto UDP (17), length 519)
                    111.221.74.33.40043 > 192.168.0.14.30250: UDP, length 491
                13:22:12.247535 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 79: (tos 0x0, ttl 128, id 32085, offset 0, flags [none], proto UDP (17), length 65)
                    192.168.0.14.30250 > 88.169.123.9.41181: UDP, length 37
                13:22:12.302800 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 521: (tos 0x8, ttl 255, id 25908, offset 0, flags [none], proto UDP (17), length 507)
                    46.73.213.111.3167 > 192.168.0.14.30250: UDP, length 479
                13:22:12.319148 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 60: (tos 0x8, ttl 255, id 27624, offset 0, flags [none], proto UDP (17), length 46)
                    88.169.123.9.41181 > 192.168.0.14.30250: UDP, length 18
                ^@13:22:12.743933 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32086, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 187.37.219.57.50878: UDP, length 103
                13:22:12.747415 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32087, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 77.54.122.6.49992: UDP, length 103
                13:22:12.747471 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32088, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 94.51.11.245.16356: UDP, length 103
                13:22:12.747516 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32089, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 91.148.189.130.13564: UDP, length 103
                13:22:12.747559 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32090, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 78.73.9.127.20667: UDP, length 103
                13:22:12.747606 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32091, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 122.172.43.68.20370: UDP, length 103
                13:22:12.882471 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 319: (tos 0x8, ttl 255, id 53846, offset 0, flags [none], proto UDP (17), length 305)
                    77.54.122.6.49992 > 192.168.0.14.44515: UDP, length 277
                13:22:12.883905 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32092, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 218.237.248.134.1038: UDP, length 103
                13:22:12.925747 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 128, id 32093, offset 0, flags [DF], proto TCP (6), length 52)
                    192.168.0.14.52472 > 213.240.252.97.49336: Flags [s], cksum 0xb461 (correct), seq 1747063256, win 8192, options [mss 1460,nop,wscale 2,nop,nop,sackOK], length 0
                13:22:12.926187 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 128, id 32094, offset 0, flags [DF], proto TCP (6), length 52)
                    192.168.0.14.52473 > 147.213.134.73.3792: Flags [s], cksum 0xb949 (correct), seq 1048354993, win 8192, options [mss 1460,nop,wscale 2,nop,nop,sackOK], length 0
                13:22:12.931951 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 310: (tos 0x8, ttl 255, id 24641, offset 0, flags [none], proto UDP (17), length 296)
                    78.73.9.127.20667 > 192.168.0.14.44515: UDP, length 268
                13:22:12.933262 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32095, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 183.104.144.222.6881: UDP, length 103
                13:22:12.941634 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 66: (tos 0x4, ttl 255, id 974, offset 0, flags [DF], proto TCP (6), length 52)
                    213.240.252.97.49336 > 192.168.0.14.52472: Flags [S.], cksum 0x46d9 (correct), seq 103450447, ack 1747063257, win 65535, options [mss 1460,nop,wscale 0,nop,nop,sackOK], length 0
                13:22:12.942749 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 128, id 32096, offset 0, flags [DF], proto TCP (6), length 40)
                    192.168.0.14.52472 > 213.240.252.97.49336: Flags [.], cksum 0x477b (correct), ack 1, win 16425, length 0
                13:22:12.945321 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 117: (tos 0x0, ttl 128, id 32097, offset 0, flags [DF], proto TCP (6), length 103)
                    192.168.0.14.52472 > 213.240.252.97.49336: Flags [P.], ack 1, win 16425, length 63
                13:22:12.948471 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 329: (tos 0x8, ttl 255, id 31644, offset 0, flags [none], proto UDP (17), length 315)
                    94.51.11.245.16356 > 192.168.0.14.44515: UDP, length 287
                13:22:12.973275 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 163: (tos 0x4, ttl 255, id 976, offset 0, flags [DF], proto TCP (6), length 149)
                    213.240.252.97.49336 > 192.168.0.14.52472: Flags [P.], ack 64, win 65472, length 109
                13:22:12.982060 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 66: (tos 0x8, ttl 255, id 28199, offset 0, flags [DF], proto TCP (6), length 52)
                    147.213.134.73.3792 > 192.168.0.14.52473: Flags [S.], cksum 0xd55c (correct), seq 1223269100, ack 1048354994, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
                13:22:12.985635 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 109: (tos 0x0, ttl 128, id 32098, offset 0, flags [DF], proto TCP (6), length 95)
                    192.168.0.14.52472 > 213.240.252.97.49336: Flags [P.], ack 110, win 16397, length 55
                13:22:12.987229 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 128, id 32099, offset 0, flags [DF], proto TCP (6), length 40)
                    192.168.0.14.52473 > 147.213.134.73.3792: Flags [.], cksum 0xf606 (correct), ack 1, win 16425, length 0
                13:22:12.987763 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 119: (tos 0x0, ttl 128, id 32100, offset 0, flags [DF], proto TCP (6), length 105)
                    192.168.0.14.52473 > 147.213.134.73.3792: Flags [P.], ack 1, win 16425, length 65
                13:22:12.995620 ec:55:f9:27:b1:b6 > 33:33:00:01:00:02, ethertype IPv6 (0x86dd), length 148: (hlim 1, next-header UDP (17) payload length: 94) fe80::fd59:7bd3:911a:d51d.546 > ff02::1:2.547: dhcp6 solicit (xid=be8309 (elapsed time 1500) (client ID hwaddr/time type 1 time 368372785 984be1f385cd)[|dhcp6ext])
                13:22:13.040848 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 201: (tos 0x8, ttl 255, id 28200, offset 0, flags [DF], proto TCP (6), length 187)
                    147.213.134.73.3792 > 192.168.0.14.52473: Flags [P.], ack 66, win 256, length 147
                13:22:13.043525 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 129: (tos 0x0, ttl 128, id 32101, offset 0, flags [DF], proto TCP (6), length 115)
                    192.168.0.14.52473 > 147.213.134.73.3792: Flags [P.], ack 148, win 16388, length 75
                13:22:13.117301 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 60: (tos 0x4, ttl 255, id 983, offset 0, flags [DF], proto TCP (6), length 40)
                    213.240.252.97.49336 > 192.168.0.14.52472: Flags [.], cksum 0x8737 (correct), ack 119, win 65417, length 0
                13:22:13.118449 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 67: (tos 0x0, ttl 128, id 32102, offset 0, flags [DF], proto TCP (6), length 53)
                    192.168.0.14.52472 > 213.240.252.97.49336: Flags [P.], cksum 0x62bc (correct), ack 110, win 16397, length 13
                13:22:13.136269 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 71: (tos 0x4, ttl 255, id 984, offset 0, flags [DF], proto TCP (6), length 57)
                    213.240.252.97.49336 > 192.168.0.14.52472: Flags [P.], cksum 0xa594 (correct), ack 132, win 65404, length 17
                13:22:13.192276 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 329: (tos 0x8, ttl 255, id 48150, offset 0, flags [none], proto UDP (17), length 315)
                    122.172.43.68.20370 > 192.168.0.14.44515: UDP, length 287
                13:22:13.193782 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32103, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 66.8.182.124.55223: UDP, length 103
                13:22:13.291651 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 173: (tos 0x8, ttl 255, id 41184, offset 0, flags [none], proto ICMP (1), length 159)
                    218.237.248.134 > 192.168.0.14: ICMP 218.237.248.134 udp port 1038 unreachable, length 139
                	(tos 0x0, ttl 235, id 32092, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 218.237.248.134.1038: UDP, length 103[|icmp]
                13:22:13.292798 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 60: (tos 0x8, ttl 255, id 28201, offset 0, flags [DF], proto TCP (6), length 40)
                    147.213.134.73.3792 > 192.168.0.14.52473: Flags [.], cksum 0x3411 (correct), ack 141, win 256, length 0
                13:22:13.293817 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 67: (tos 0x0, ttl 128, id 32104, offset 0, flags [DF], proto TCP (6), length 53)
                    192.168.0.14.52473 > 147.213.134.73.3792: Flags [P.], cksum 0x2c6c (correct), ack 148, win 16388, length 13
                13:22:13.341185 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 72: (tos 0x8, ttl 255, id 28202, offset 0, flags [DF], proto TCP (6), length 58)
                    147.213.134.73.3792 > 192.168.0.14.52473: Flags [P.], cksum 0xc67f (correct), ack 154, win 256, length 18
                13:22:13.342744 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 157: (tos 0x0, ttl 128, id 32105, offset 0, flags [none], proto UDP (17), length 143)
                    192.168.0.14.30250 > 157.55.235.146.40030: UDP, length 115
                13:22:13.345349 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 128, id 32106, offset 0, flags [DF], proto TCP (6), length 40)
                    192.168.0.14.52472 > 213.240.252.97.49336: Flags [.], cksum 0x469a (correct), ack 127, win 16393, length 0
                13:22:13.406491 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 63: (tos 0x8, ttl 255, id 0, offset 0, flags [DF], proto UDP (17), length 49)
                    157.55.235.146.40030 > 192.168.0.14.30250: UDP, length 21
                13:22:13.546124 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 128, id 32107, offset 0, flags [DF], proto TCP (6), length 40)
                    192.168.0.14.52473 > 147.213.134.73.3792: Flags [.], cksum 0xf4f2 (correct), ack 166, win 16383, length 0
                13:22:13.743676 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32108, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 84.215.110.165.22217: UDP, length 103
                13:22:13.743849 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32109, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 79.90.169.129.7632: UDP, length 103
                13:22:13.810511 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 198: (tos 0x8, ttl 255, id 2205, offset 0, flags [none], proto UDP (17), length 184)
                    84.215.110.165.22217 > 192.168.0.14.44515: UDP, length 156
                13:22:13.828145 00:e0:4c:51:bc:60 > c4:46:19:49:94:ba, ethertype IPv4 (0x0800), length 98: (tos 0x8, ttl 255, id 15709, offset 0, flags [none], proto UDP (17), length 84)
                    94.245.121.251.3544 > 192.168.0.15.49688: UDP, length 56
                13:22:13.889695 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 310: (tos 0x8, ttl 255, id 4535, offset 0, flags [none], proto UDP (17), length 296)
                    79.90.169.129.7632 > 192.168.0.14.44515: UDP, length 268
                13:22:13.891108 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32110, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 87.153.242.154.55627: UDP, length 103
                13:22:13.891643 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32111, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 121.220.56.187.13671: UDP, length 103
                13:22:13.891698 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32112, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 14.97.145.92.39002: UDP, length 103
                13:22:13.919616 00:e0:4c:51:bc:60 > c4:46:19:49:94:ba, ethertype IPv4 (0x0800), length 98: (tos 0x8, ttl 255, id 10921, offset 0, flags [none], proto UDP (17), length 84)
                    94.245.121.251.3544 > 192.168.0.15.49688: UDP, length 56
                13:22:13.945966 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 70: (tos 0x8, ttl 255, id 32110, offset 0, flags [none], proto ICMP (1), length 56)
                    87.153.242.154 > 192.168.0.14: ICMP host 87.153.242.154 unreachable - admin prohibited filter, length 36
                	(tos 0x0, ttl 246, id 32110, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 87.153.242.154.55627: UDP, length 103
                13:22:13.959496 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 128, id 32113, offset 0, flags [DF], proto TCP (6), length 40)
                    192.168.0.14.52472 > 213.240.252.97.49336: Flags [F.], cksum 0x4699 (correct), seq 132, ack 127, win 16393, length 0
                13:22:13.959585 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 128, id 32114, offset 0, flags [DF], proto TCP (6), length 40)
                    192.168.0.14.52473 > 147.213.134.73.3792: Flags [F.], cksum 0xf4f1 (correct), seq 154, ack 166, win 16383, length 0
                13:22:13.975828 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 60: (tos 0x4, ttl 255, id 1014, offset 0, flags [DF], proto TCP (6), length 40)
                    213.240.252.97.49336 > 192.168.0.14.52472: Flags [.], cksum 0x8725 (correct), ack 133, win 65404, length 0
                13:22:13.982046 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 60: (tos 0x4, ttl 255, id 1015, offset 0, flags [DF], proto TCP (6), length 40)
                    213.240.252.97.49336 > 192.168.0.14.52472: Flags [F.], cksum 0x8724 (correct), seq 127, ack 133, win 65404, length 0
                13:22:13.983047 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 128, id 32115, offset 0, flags [DF], proto TCP (6), length 40)
                    192.168.0.14.52472 > 213.240.252.97.49336: Flags [.], cksum 0x4698 (correct), ack 128, win 16393, length 0
                13:22:14.009533 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 60: (tos 0x8, ttl 255, id 28205, offset 0, flags [DF], proto TCP (6), length 40)
                    147.213.134.73.3792 > 192.168.0.14.52473: Flags [.], cksum 0x33f1 (correct), ack 155, win 256, length 0
                13:22:14.012093 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 60: (tos 0x8, ttl 255, id 28206, offset 0, flags [DF], proto TCP (6), length 40)
                    147.213.134.73.3792 > 192.168.0.14.52473: Flags [F.], cksum 0x33f0 (correct), seq 166, ack 155, win 256, length 0
                13:22:14.013085 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 128, id 32116, offset 0, flags [DF], proto TCP (6), length 40)
                    192.168.0.14.52473 > 147.213.134.73.3792: Flags [.], cksum 0xf4f0 (correct), ack 167, win 16383, length 0
                13:22:14.727314 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32117, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 46.150.81.143.24906: UDP, length 103
                13:22:14.727614 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 145: (tos 0x0, ttl 128, id 32118, offset 0, flags [none], proto UDP (17), length 131)
                    192.168.0.14.44515 > 94.66.190.163.10155: UDP, length 103
                13:22:15.052466 00:e0:4c:51:bc:60 > 01:00:5e:7f:ff:fa, ethertype IPv4 (0x0800), length 319: (tos 0x0, ttl 1, id 38890, offset 0, flags [none], proto UDP (17), length 305)
                    192.168.0.254.28971 > 239.255.255.250.1900: UDP, length 277
                13:22:15.052523 00:e0:4c:51:bc:60 > 01:00:5e:7f:ff:fa, ethertype IPv4 (0x0800), length 391: (tos 0x0, ttl 1, id 14901, offset 0, flags [none], proto UDP (17), length 377)
                    192.168.0.254.28971 > 239.255.255.250.1900: UDP, length 349
                13:22:15.052593 00:e0:4c:51:bc:60 > 01:00:5e:7f:ff:fa, ethertype IPv4 (0x0800), length 387: (tos 0x0, ttl 1, id 55270, offset 0, flags [none], proto UDP (17), length 373)
                    192.168.0.254.28971 > 239.255.255.250.1900: UDP, length 345
                13:22:15.052657 00:e0:4c:51:bc:60 > 01:00:5e:7f:ff:fa, ethertype IPv4 (0x0800), length 367: (tos 0x0, ttl 1, id 65063, offset 0, flags [none], proto UDP (17), length 353)
                    192.168.0.254.28971 > 239.255.255.250.1900: UDP, length 325
                13:22:15.052719 00:e0:4c:51:bc:60 > 01:00:5e:7f:ff:fa, ethertype IPv4 (0x0800), length 399: (tos 0x0, ttl 1, id 7585, offset 0, flags [none], proto UDP (17), length 385)
                    192.168.0.254.28971 > 239.255.255.250.1900: UDP, length 357
                13:22:15.052782 00:e0:4c:51:bc:60 > 01:00:5e:7f:ff:fa, ethertype IPv4 (0x0800), length 381: (tos 0x0, ttl 1, id 2071, offset 0, flags [none], proto UDP (17), length 367)
                    192.168.0.254.28971 > 239.255.255.250.1900: UDP, length 339
                13:22:15.052846 00:e0:4c:51:bc:60 > 01:00:5e:7f:ff:fa, ethertype IPv4 (0x0800), length 383: (tos 0x0, ttl 1, id 33843, offset 0, flags [none], proto UDP (17), length 369)
                    192.168.0.254.28971 > 239.255.255.250.1900: UDP, length 341
                13:22:15.052909 00:e0:4c:51:bc:60 > 01:00:5e:7f:ff:fa, ethertype IPv4 (0x0800), length 383: (tos 0x0, ttl 1, id 8076, offset 0, flags [none], proto UDP (17), length 369)
                    192.168.0.254.28971 > 239.255.255.250.1900: UDP, length 341
                13:22:15.129861 00:e0:4c:51:bc:60 > ec:55:f9:27:b1:b6, ethertype IPv4 (0x0800), length 66: (tos 0x8, ttl 255, id 23860, offset 0, flags [DF], proto TCP (6), length 52)
                    195.174.162.189.60485 > 192.168.0.14.44515: Flags [s], cksum 0xa3ea (correct), seq 3285067281, win 8192, options [mss 1460,nop,wscale 2,nop,nop,sackOK], length 0
                13:22:15.207935 ec:55:f9:27:b1:b6 > 00:e0:4c:51:bc:60, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 128, id 32119, offset 0, flags [DF], proto TCP (6), length 52)
                    192.168.0.14.44515 > 195.174.162.189.60485: Flags [S.], cksum 0x2508 (correct), seq 2486495894, ack 3285067282, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
                
                [/s][/s][/s]
                

                Sys 2.0-RC1: Intel Atom N330 Dual Core @1.6 2048M Ram 40GHD

                1 Reply Last reply Reply Quote 0
                • marcellocM
                  marcelloc
                  last edited by

                  The tcpdump show only traffic from 192.168.0.14.

                  I'll try to simulate limit on second interface here and feedback.

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • savagoS
                    savago
                    last edited by

                    @marcelloc:

                    The tcpdump show only traffic from 192.168.0.14.

                    I'll try to simulate limit on second interface here and feedback.

                    Yes,at this moment only 192.168.0.14 and 192.168.0.15  is connected and online.

                    Sys 2.0-RC1: Intel Atom N330 Dual Core @1.6 2048M Ram 40GHD

                    1 Reply Last reply Reply Quote 0
                    • savagoS
                      savago
                      last edited by

                      After some day tests i found  that upnp break ipfw limiter on all nics and assigned rules not work correctly.

                      Sys 2.0-RC1: Intel Atom N330 Dual Core @1.6 2048M Ram 40GHD

                      1 Reply Last reply Reply Quote 0
                      • savagoS
                        savago
                        last edited by

                        Same  problem  reported here http://forum.pfsense.org/index.php/topic,37399.0.html

                        pfctl -vsr

                        
                        scrub in on fxp0 all min-ttl 255 fragment reassemble
                          [ Evaluations: 3366630   Packets: 683193    Bytes: 240344701   States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        scrub in on re0 all min-ttl 255 fragment reassemble
                          [ Evaluations: 1887278   Packets: 1035091   Bytes: 496825229   States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        anchor "relayd/*" all
                          [ Evaluations: 33964     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop in log all label "Default deny rule"
                          [ Evaluations: 33964     Packets: 17161     Bytes: 1107535     States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop out log all label "Default deny rule"
                          [ Evaluations: 33964     Packets: 12        Bytes: 1416        States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop in quick inet6 all
                          [ Evaluations: 33964     Packets: 30        Bytes: 2160        States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop out quick inet6 all
                          [ Evaluations: 7376      Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop quick proto tcp from any port = 0 to any
                          [ Evaluations: 33934     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop quick proto tcp from any to any port = 0
                          [ Evaluations: 18322     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop quick proto udp from any port = 0 to any
                          [ Evaluations: 33936     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop quick proto udp from any to any port = 0
                          [ Evaluations: 15590     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop quick from <snort2c>to any label "Block snort2c hosts"
                          [ Evaluations: 33938     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop quick from any to <snort2c>label "Block snort2c hosts"
                          [ Evaluations: 33938     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop in log quick proto tcp from <sshlockout>to any port = 2299 label "sshlockout"
                          [ Evaluations: 33938     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop in log quick proto tcp from <webconfiguratorlockout>to any port = https label "webConfiguratorlockout"
                          [ Evaluations: 11827     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop in quick from <virusprot>to any label "virusprot overload table"
                          [ Evaluations: 26564     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop in log quick on fxp0 from <bogons>to any label "block bogon networks from WAN"
                          [ Evaluations: 26565     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop in on ! fxp0 inet from 87.120.xxx.0/24 to any
                          [ Evaluations: 26565     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop in inet from 87.120.xxx.yyy to any
                          [ Evaluations: 26565     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop in on fxp0 inet6 from fe80::4e00:10ff:fe54:4632 to any
                          [ Evaluations: 26565     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop in log quick on fxp0 inet from 10.0.0.0/8 to any label "block private networks from wan block 10/8"
                          [ Evaluations: 19933     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop in log quick on fxp0 inet from 127.0.0.0/8 to any label "block private networks from wan block 127/8"
                          [ Evaluations: 19933     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop in log quick on fxp0 inet from 172.16.0.0/12 to any label "block private networks from wan block 172.16/12"
                          [ Evaluations: 19933     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop in log quick on fxp0 inet from 192.168.0.0/16 to any label "block private networks from wan block 192.168/16"
                          [ Evaluations: 19933     Packets: 2766      Bytes: 237779      States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop in on ! re0 inet from 192.168.0.0/24 to any
                          [ Evaluations: 23799     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop in inet from 192.168.0.254 to any
                          [ Evaluations: 23799     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        block drop in on re0 inet6 from fe80::21c:c0ff:fec4:da44 to any
                          [ Evaluations: 23799     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        pass in quick on re0 inet proto udp from any port = bootpc to 255.255.255.255 port = bootps keep state label "allow access to DHCP server"
                          [ Evaluations: 6630      Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        pass in quick on re0 inet proto udp from any port = bootpc to 192.168.0.254 port = bootps keep state label "allow access to DHCP server"
                          [ Evaluations: 1         Packets: 2         Bytes: 717         States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        pass out quick on re0 inet proto udp from 192.168.0.254 port = bootps to any port = bootpc keep state label "allow access to DHCP server"
                          [ Evaluations: 8218      Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        pass in on lo0 all flags S/SA keep state label "pass loopback"
                          [ Evaluations: 31174     Packets: 4         Bytes: 536         States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        pass out on lo0 all flags S/SA keep state label "pass loopback"
                          [ Evaluations: 4         Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        pass out all flags S/SA keep state allow-opts label "let out anything from firewall host itself"
                          [ Evaluations: 31172     Packets: 266001    Bytes: 255650100   States: 79    ]
                          [ Inserted: uid 0 pid 34968 ]
                        pass out route-to (fxp0 87.120.xxx.y) inet from 87.120.xxx.yyy to ! 87.120.xxx.0/24 flags S/SA keep state allow-opts label "let out anything from firewall host itself"
                          [ Evaluations: 7376      Packets: 332423    Bytes: 246309331   States: 44    ]
                          [ Inserted: uid 0 pid 34968 ]
                        pass in quick on re0 proto tcp from any to (re0) port = http flags S/SA keep state label "anti-lockout rule"
                          [ Evaluations: 31174     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        pass in quick on re0 proto tcp from any to (re0) port = https flags S/SA keep state label "anti-lockout rule"
                          [ Evaluations: 6         Packets: 443       Bytes: 189501      States: 1     ]
                          [ Inserted: uid 0 pid 34968 ]
                        pass in quick on re0 proto tcp from any to (re0) port = 2299 flags S/SA keep state label "anti-lockout rule"
                          [ Evaluations: 3         Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        anchor "userrules/*" all
                          [ Evaluations: 31171     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        pass in quick on fxp0 reply-to (fxp0 87.120.xxx.y) inet proto icmp from any to 87.120.xxx.yyy keep state label "USER_RULE"
                          [ Evaluations: 31171     Packets: 19        Bytes: 1978        States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        pass in quick on fxp0 reply-to (fxp0 87.120.xxx.y) inet proto tcp from any to 87.120.xxx.yyy port = https flags S/SA keep state label "USER_RULE"
                          [ Evaluations: 17154     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        pass in quick on fxp0 reply-to (fxp0 87.120.xxx.y) inet proto tcp from any to 87.120.xxx.yyy port = 2299 flags S/SA keep state label "USER_RULE"
                          [ Evaluations: 5999      Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        pass in quick on re0 inet from 192.168.0.0/24 to any flags S/SA keep state label "USER_RULE: Default allow LAN to any rule" dnpipe(1, 2)
                          [ Evaluations: 24520     Packets: 323866    Bytes: 237555787   States: 54    ]
                          [ Inserted: uid 0 pid 34968 ]
                        anchor "tftp-proxy/*" all
                          [ Evaluations: 24547     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        anchor "miniupnpd" all
                          [ Evaluations: 24547     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]</bogons></virusprot></webconfiguratorlockout></sshlockout></snort2c></snort2c> 
                        

                        pfctl -vsn

                        
                        no nat proto carp all
                          [ Evaluations: 7870      Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        nat-anchor "natearly/*" all
                          [ Evaluations: 7870      Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        nat-anchor "natrules/*" all
                          [ Evaluations: 7870      Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        nat on fxp0 inet from 192.168.0.0/24 port = isakmp to any port = isakmp -> 87.120.xxx.yyy port 500
                          [ Evaluations: 7870      Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        nat on fxp0 inet from 127.0.0.0/8 port = isakmp to any port = isakmp -> 87.120.xxx.yyy port 500
                          [ Evaluations: 245       Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        nat on fxp0 inet from 192.168.0.0/24 to any -> 87.120.xxx.yyy port 1024:65535
                          [ Evaluations: 6838      Packets: 347150    Bytes: 259653965   States: 41    ]
                          [ Inserted: uid 0 pid 34968 ]
                        nat on fxp0 inet from 127.0.0.0/8 to any -> 87.120.xxx.yyy port 1024:65535
                          [ Evaluations: 245       Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        no rdr proto carp all
                          [ Evaluations: 33730     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        rdr-anchor "relayd/*" all
                          [ Evaluations: 33730     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        rdr-anchor "tftp-proxy/*" all
                          [ Evaluations: 33730     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        rdr-anchor "miniupnpd" all
                          [ Evaluations: 33730     Packets: 0         Bytes: 0           States: 0     ]
                          [ Inserted: uid 0 pid 34968 ]
                        
                        

                        pfctl -a miniupnpd -vsn

                        
                        rdr pass quick on fxp0 inet proto tcp from any to any port = 51413 keep state label "Transmission at 51413" rtable 0 -> 192.168.0.10 port 51413
                          [ Evaluations: 34050     Packets: 270701    Bytes: 255875228   States: 81    ]
                          [ Inserted: uid 0 pid 16714 ]
                        
                        

                        Sys 2.0-RC1: Intel Atom N330 Dual Core @1.6 2048M Ram 40GHD

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.