Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    WAN link going down

    Problems Installing or Upgrading pfSense Software
    9
    62
    14.4k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      JWTech
      last edited by

      Just resolved my issue by disabling the local DNS resolution. Changed it to just use Google's DNS servers instead (8.8.8.8, 8.8.4.4) and it's working fine.

      Not sure if it's the exact same issue as what everyone else has had, but that's what did it for me.

      1 Reply Last reply Reply Quote 0
      • T
        TieT
        last edited by

        Test it for a few days, it worked for me for a few days, but then the gateway was lost again.
        It seems when I create a vpn to my fw the issue begins…

        @JWTech:

        Just resolved my issue by disabling the local DNS resolution. Changed it to just use Google's DNS servers instead (8.8.8.8, 8.8.4.4) and it's working fine.

        Not sure if it's the exact same issue as what everyone else has had, but that's what did it for me.

        1 Reply Last reply Reply Quote 0
        • X
          xtofh
          last edited by

          @Derelict:

          @man:

          arpresolve: can't allocate llinfo for %d.%d.%d.%d The route for the ref-
              erenced host points to a device upon which ARP is required, but ARP was
              unable to allocate a routing table entry in which to store the host's MAC
              address.  This usually points to a misconfigured routing table.  It can
              also occur if the kernel cannot allocate memory.

          What's in netstat -rn when it's failing?

          Tnx for the suggestion, will try this and the sysctl dev.em.1 on next problem.

          I'm waiting for it to occur again (it can take several hours but it might as well take 48 hours) and report back.

          Kristof

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            I find it odd that in both cases here the actual physical link is going down. If that was a modem issue I would expect the switch to as least show a different result. I guess in a watchdog time-out scenario the link is probably brought down when the NIC is reset.  Hmmm.

            Steve

            1 Reply Last reply Reply Quote 0
            • Q
              q54e3w
              last edited by

              I had my line go down this morning at 6:50am. I spent a couple of hours over breakfast debugging but this is beyond my level of knowledge to understand fully whats happening. I captured a ton of log material and tcpdump of my WAN interface during the initial outage and also during various reboots of pfsense and later my modem. I'll try and summarise this here but if needed I can zip this lot up and pass eton to a dev or something if that helps? Excuse me if I break this into a few posts to make it easy to write.

              Notes
              I'm using virgin media in the UK with their Superhub in modem mode
              igb4 is my WAN port and I've set its MAC address to 00:22:68:1f:74:81.

              this is what i recorded when I got to my desk and found the WAN had dropped.

              
[2.2-RELEASE][admin@pfsense.irj972.local.lan]/var/log: netstat -rn
Routing tables

Internet:
Destination        Gateway            Flags      Netif Expire
0.0.0.0/8          link#7             U          igb4
127.0.0.1          link#13            UH          lo0
192.168.10.0/24    link#1             U          igb0
192.168.10.1       link#1             UHS         lo0
192.168.50.0/24    link#8             U          igb5
192.168.50.1       link#8             UHS         lo0
192.168.60.0/24    link#9             U          igb6
192.168.60.1       link#9             UHS         lo0
192.168.70.0/24    link#10            U          igb7
192.168.70.1       link#10            UHS         lo0
192.168.101.0/24   link#5             U           ix0
192.168.101.1      link#5             UHS         lo0
192.168.110.0/24   link#6             U           ix1
192.168.110.1      link#6             UHS         lo0
192.168.210.0/24   192.168.210.2      UGS      ovpns2
192.168.210.1      link#15            UHS         lo0
192.168.210.2      link#15            UH       ovpns2

Internet6:
Destination                       Gateway                       Flags      Netif Expire
::1                               link#13                       UH          lo0
fe80::%igb0/64                    link#1                        U          igb0
fe80::a236:9fff:fe2d:eba8%igb0    link#1                        UHS         lo0
fe80::%ix0/64                     link#5                        U           ix0
fe80::92e2:baff:fe37:fba4%ix0     link#5                        UHS         lo0
fe80::%ix1/64                     link#6                        U           ix1
fe80::92e2:baff:fe37:fba5%ix1     link#6                        UHS         lo0
fe80::%igb4/64                    link#7                        U          igb4
fe80::222:68ff:fe1f:7481%igb4     link#7                        UHS         lo0
fe80::%igb5/64                    link#8                        U          igb5
fe80::ec4:7aff:fe07:d551%igb5     link#8                        UHS         lo0
fe80::%igb6/64                    link#9                        U          igb6
fe80::ec4:7aff:fe07:d552%igb6     link#9                        UHS         lo0
fe80::%igb7/64                    link#10                       U          igb7
fe80::ec4:7aff:fe07:d553%igb7     link#10                       UHS         lo0
fe80::%lo0/64                     link#13                       U           lo0
fe80::1%lo0                       link#13                       UHS         lo0
fe80::a236:9fff:fe2d:eba8%ovpns2  link#15                       UHS         lo0
ff01::%igb0/32                    fe80::a236:9fff:fe2d:eba8%igb0 U          igb0
ff01::%ix0/32                     fe80::92e2:baff:fe37:fba4%ix0 U           ix0
ff01::%ix1/32                     fe80::92e2:baff:fe37:fba5%ix1 U           ix1
ff01::%igb4/32                    fe80::222:68ff:fe1f:7481%igb4 U          igb4
ff01::%igb5/32                    fe80::ec4:7aff:fe07:d551%igb5 U          igb5
ff01::%igb6/32                    fe80::ec4:7aff:fe07:d552%igb6 U          igb6
ff01::%igb7/32                    fe80::ec4:7aff:fe07:d553%igb7 U          igb7
ff01::%lo0/32                     ::1                           U           lo0
ff01::%ovpns2/32                  fe80::a236:9fff:fe2d:eba8%ovpns2 U        ovpns2
ff02::%igb0/32                    fe80::a236:9fff:fe2d:eba8%igb0 U          igb0
ff02::%ix0/32                     fe80::92e2:baff:fe37:fba4%ix0 U           ix0
ff02::%ix1/32                     fe80::92e2:baff:fe37:fba5%ix1 U           ix1
ff02::%igb4/32                    fe80::222:68ff:fe1f:7481%igb4 U          igb4
ff02::%igb5/32                    fe80::ec4:7aff:fe07:d551%igb5 U          igb5
ff02::%igb6/32                    fe80::ec4:7aff:fe07:d552%igb6 U          igb6
ff02::%igb7/32                    fe80::ec4:7aff:fe07:d553%igb7 U          igb7
ff02::%lo0/32                     ::1                           U           lo0
ff02::%ovpns2/32                  fe80::a236:9fff:fe2d:eba8%ovpns2 U        ovpns2

              and this is the dhcpd.log which is basically full of repeating sections of this
              Same old pattern Ive been seeing for a few weeks now which I think syncs with my virgin modems 7 day DHCP expiry

              
Mar  2 08:29:25 pfsense dhclient: PREINIT
Mar  2 08:29:25 pfsense dhclient: EXPIRE
Mar  2 08:29:25 pfsense dhclient: Deleting old routes
Mar  2 08:29:25 pfsense dhclient: PREINIT
Mar  2 08:29:25 pfsense dhclient[25776]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 2
Mar  2 08:29:25 pfsense dhclient[25776]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 4
Mar  2 08:29:29 pfsense dhclient[25776]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 7
Mar  2 08:29:36 pfsense dhclient[25776]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 14
Mar  2 08:29:50 pfsense dhclient[25776]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 17
Mar  2 08:30:07 pfsense dhclient[25776]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 14
Mar  2 08:30:21 pfsense dhclient[25776]: No DHCPOFFERS received.
Mar  2 08:30:21 pfsense dhclient[25776]: Trying recorded lease 86.5.163.20
Mar  2 08:30:21 pfsense dhclient: TIMEOUT
Mar  2 08:30:21 pfsense dhclient: Starting add_new_address()
Mar  2 08:30:21 pfsense dhclient: ifconfig igb4 inet 86.5.163.20 netmask 255.255.255.0 broadcast 255.255.255.255 
Mar  2 08:30:21 pfsense dhclient: New IP Address (igb4): 86.5.163.20
Mar  2 08:30:21 pfsense dhclient: New Subnet Mask (igb4): 255.255.255.0
Mar  2 08:30:21 pfsense dhclient: New Broadcast Address (igb4): 255.255.255.255
Mar  2 08:30:21 pfsense dhclient: New Routers (igb4): 86.5.163.1
Mar  2 08:30:22 pfsense dhclient: New Routers (igb4): 86.5.163.1
Mar  2 08:30:23 pfsense dhclient: Deleting old routes
Mar  2 08:30:23 pfsense dhclient[25776]: bound: renewal in 244840 seconds.
Mar  2 08:30:26 pfsense dhcpd: Received signal 15, initiating shutdown.
Mar  2 08:30:26 pfsense dhcpd: Disabling output on BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24
Mar  2 08:30:26 pfsense dhcpd: Disabling input on BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24
Mar  2 08:30:26 pfsense dhcpd: Disabling output on BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24
Mar  2 08:30:26 pfsense dhcpd: Disabling input on BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24
Mar  2 08:30:26 pfsense dhcpd: Disabling output on BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24
Mar  2 08:30:26 pfsense dhcpd: Disabling input on BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24
Mar  2 08:30:26 pfsense dhcpd: Disabling output on BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24
Mar  2 08:30:26 pfsense dhcpd: Disabling input on BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24
Mar  2 08:30:26 pfsense dhcpd: Disabling output on BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24
Mar  2 08:30:26 pfsense dhcpd: Disabling input on BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24
Mar  2 08:30:26 pfsense dhcpd: Disabling output on BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24
Mar  2 08:30:26 pfsense dhcpd: Disabling input on BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24
Mar  2 08:30:27 pfsense dhcpd: Internet Systems Consortium DHCP Server 4.2.6
Mar  2 08:30:27 pfsense dhcpd: Copyright 2004-2014 Internet Systems Consortium.
Mar  2 08:30:27 pfsense dhcpd: All rights reserved.
Mar  2 08:30:27 pfsense dhcpd: For info, please visit https://www.isc.org/software/dhcp/
Mar  2 08:30:27 pfsense dhcpd: Internet Systems Consortium DHCP Server 4.2.6
Mar  2 08:30:27 pfsense dhcpd: Copyright 2004-2014 Internet Systems Consortium.
Mar  2 08:30:27 pfsense dhcpd: All rights reserved.
Mar  2 08:30:27 pfsense dhcpd: For info, please visit https://www.isc.org/software/dhcp/
Mar  2 08:30:27 pfsense dhcpd: Wrote 0 deleted host decls to leases file.
Mar  2 08:30:27 pfsense dhcpd: Wrote 0 new dynamic host decls to leases file.
Mar  2 08:30:27 pfsense dhcpd: Wrote 45 leases to leases file.
Mar  2 08:30:27 pfsense dhcpd: Listening on BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24
Mar  2 08:30:27 pfsense dhcpd: Sending on   BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24
Mar  2 08:30:27 pfsense dhcpd: Listening on BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24
Mar  2 08:30:27 pfsense dhcpd: Sending on   BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24
Mar  2 08:30:27 pfsense dhcpd: Listening on BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24
Mar  2 08:30:27 pfsense dhcpd: Sending on   BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24
Mar  2 08:30:27 pfsense dhcpd: Listening on BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24
Mar  2 08:30:27 pfsense dhcpd: Sending on   BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24
Mar  2 08:30:27 pfsense dhcpd: Listening on BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24
Mar  2 08:30:27 pfsense dhcpd: Sending on   BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24
Mar  2 08:30:27 pfsense dhcpd: Listening on BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24
Mar  2 08:30:27 pfsense dhcpd: Sending on   BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24
Mar  2 08:30:27 pfsense dhcpd: Sending on   Socket/fallback/fallback-net
Mar  2 08:30:27 pfsense dhclient[26757]: connection closed
Mar  2 08:30:27 pfsense dhclient[26757]: exiting.

              sysctl igb.4 related info. Nothing that jumped out to me like excessive interrupts, packet collisions etc….just looks like a dead NIC

              
dev.igb.4.%desc: Intel(R) PRO/1000 Network Connection version - 2.4.0
dev.igb.4.%driver: igb
dev.igb.4.%location: slot=20 function=0 handle=\_SB_.PCI0.D01B
dev.igb.4.%pnpinfo: vendor=0x8086 device=0x1f41 subvendor=0x15d9 subdevice=0x1f41 class=0x020000
dev.igb.4.%parent: pci0
dev.igb.4.nvm: -1
dev.igb.4.enable_aim: 1
dev.igb.4.fc: 3
dev.igb.4.rx_processing_limit: 100
dev.igb.4.dmac: 0
dev.igb.4.eee_disabled: 0
dev.igb.4.link_irq: 403
dev.igb.4.dropped: 0
dev.igb.4.tx_dma_fail: 0
dev.igb.4.rx_overruns: 0
dev.igb.4.watchdog_timeouts: 0
dev.igb.4.device_control: 1477706305
dev.igb.4.rx_control: 67141634
dev.igb.4.interrupt_mask: 4
dev.igb.4.extended_int_mask: 2147484159
dev.igb.4.tx_buf_alloc: 0
dev.igb.4.rx_buf_alloc: 0
dev.igb.4.fc_high_water: 33168
dev.igb.4.fc_low_water: 33152
dev.igb.4.queue0.no_desc_avail: 0
dev.igb.4.queue0.tx_packets: 2546184
dev.igb.4.queue0.rx_packets: 202589
dev.igb.4.queue0.rx_bytes: 0
dev.igb.4.queue0.lro_queued: 0
dev.igb.4.queue0.lro_flushed: 0
dev.igb.4.queue1.no_desc_avail: 0
dev.igb.4.queue1.tx_packets: 3569953
dev.igb.4.queue1.rx_packets: 122795
dev.igb.4.queue1.rx_bytes: 0
dev.igb.4.queue1.lro_queued: 0
dev.igb.4.queue1.lro_flushed: 0
dev.igb.4.queue2.no_desc_avail: 0
dev.igb.4.queue2.tx_packets: 995675
dev.igb.4.queue2.rx_packets: 31067808
dev.igb.4.queue2.rx_bytes: 0
dev.igb.4.queue2.lro_queued: 0
dev.igb.4.queue2.lro_flushed: 0
dev.igb.4.queue3.no_desc_avail: 0
dev.igb.4.queue3.tx_packets: 3674232
dev.igb.4.queue3.rx_packets: 88985
dev.igb.4.queue3.rx_bytes: 0
dev.igb.4.queue3.lro_queued: 0
dev.igb.4.queue3.lro_flushed: 0
dev.igb.4.queue4.no_desc_avail: 0
dev.igb.4.queue4.tx_packets: 4509460
dev.igb.4.queue4.rx_packets: 80735
dev.igb.4.queue4.rx_bytes: 0
dev.igb.4.queue4.lro_queued: 0
dev.igb.4.queue4.lro_flushed: 0
dev.igb.4.queue5.no_desc_avail: 0
dev.igb.4.queue5.tx_packets: 3015023
dev.igb.4.queue5.rx_packets: 95970
dev.igb.4.queue5.rx_bytes: 0
dev.igb.4.queue5.lro_queued: 0
dev.igb.4.queue5.lro_flushed: 0
dev.igb.4.queue6.no_desc_avail: 0
dev.igb.4.queue6.tx_packets: 2100212
dev.igb.4.queue6.rx_packets: 114919
dev.igb.4.queue6.rx_bytes: 0
dev.igb.4.queue6.lro_queued: 0
dev.igb.4.queue6.lro_flushed: 0
dev.igb.4.queue7.no_desc_avail: 0
dev.igb.4.queue7.tx_packets: 4101655
dev.igb.4.queue7.rx_packets: 105344
dev.igb.4.queue7.rx_bytes: 0
dev.igb.4.queue7.lro_queued: 0
dev.igb.4.queue7.lro_flushed: 0
dev.igb.4.mac_stats.excess_coll: 0
dev.igb.4.mac_stats.single_coll: 0
dev.igb.4.mac_stats.multiple_coll: 0
dev.igb.4.mac_stats.late_coll: 0
dev.igb.4.mac_stats.collision_count: 0
dev.igb.4.mac_stats.symbol_errors: 0
dev.igb.4.mac_stats.sequence_errors: 0
dev.igb.4.mac_stats.defer_count: 0
dev.igb.4.mac_stats.missed_packets: 0
dev.igb.4.mac_stats.recv_no_buff: 0
dev.igb.4.mac_stats.recv_undersize: 0
dev.igb.4.mac_stats.recv_fragmented: 0
dev.igb.4.mac_stats.recv_oversize: 0
dev.igb.4.mac_stats.recv_jabber: 0
dev.igb.4.mac_stats.recv_errs: 0
dev.igb.4.mac_stats.crc_errs: 0
dev.igb.4.mac_stats.alignment_errs: 0
dev.igb.4.mac_stats.coll_ext_errs: 0
dev.igb.4.mac_stats.xon_recvd: 0
dev.igb.4.mac_stats.xon_txd: 0
dev.igb.4.mac_stats.xoff_recvd: 0
dev.igb.4.mac_stats.xoff_txd: 0
dev.igb.4.mac_stats.total_pkts_recvd: 31875273
dev.igb.4.mac_stats.good_pkts_recvd: 31875273
dev.igb.4.mac_stats.bcast_pkts_recvd: 183
dev.igb.4.mac_stats.mcast_pkts_recvd: 0
dev.igb.4.mac_stats.rx_frames_64: 56499
dev.igb.4.mac_stats.rx_frames_65_127: 118706
dev.igb.4.mac_stats.rx_frames_128_255: 4268691
dev.igb.4.mac_stats.rx_frames_256_511: 308408
dev.igb.4.mac_stats.rx_frames_512_1023: 456179
dev.igb.4.mac_stats.rx_frames_1024_1522: 26666790
dev.igb.4.mac_stats.good_octets_recvd: 40798660342
dev.igb.4.mac_stats.good_octets_txd: 11294455422
dev.igb.4.mac_stats.total_pkts_txd: 24517003
dev.igb.4.mac_stats.good_pkts_txd: 24517003
dev.igb.4.mac_stats.bcast_pkts_txd: 6105
dev.igb.4.mac_stats.mcast_pkts_txd: 443
dev.igb.4.mac_stats.tx_frames_64: 282372
dev.igb.4.mac_stats.tx_frames_65_127: 291318
dev.igb.4.mac_stats.tx_frames_128_255: 17645482
dev.igb.4.mac_stats.tx_frames_256_511: 373380
dev.igb.4.mac_stats.tx_frames_512_1023: 166562
dev.igb.4.mac_stats.tx_frames_1024_1522: 5757889
dev.igb.4.mac_stats.tso_txd: 0
dev.igb.4.mac_stats.tso_ctx_fail: 0
dev.igb.4.interrupts.asserts: 48596954
dev.igb.4.interrupts.rx_pkt_timer: 31874824
dev.igb.4.interrupts.rx_abs_timer: 0
dev.igb.4.interrupts.tx_pkt_timer: 0
dev.igb.4.interrupts.tx_abs_timer: 0
dev.igb.4.interrupts.tx_queue_empty: 24512231
dev.igb.4.interrupts.tx_queue_min_thresh: 34287030
dev.igb.4.interrupts.rx_desc_min_thresh: 0
dev.igb.4.interrupts.rx_overrun: 0
dev.igb.4.host.breaker_tx_pkt: 0
dev.igb.4.host.host_tx_pkt_discard: 0
dev.igb.4.host.rx_pkt: 273
dev.igb.4.host.breaker_rx_pkts: 0
dev.igb.4.host.breaker_rx_pkt_drop: 0
dev.igb.4.host.tx_good_pkt: 161
dev.igb.4.host.breaker_tx_pkt_drop: 0
dev.igb.4.host.rx_good_bytes: 40798644311
dev.igb.4.host.tx_good_bytes: 11291998600
dev.igb.4.host.length_errors: 0
dev.igb.4.host.serdes_violation_pkt: 0
dev.igb.4.host.header_redir_missed: 0

              packet capture during failure to obtain address (this repeats etc)…...

              
[2.2-RELEASE][admin@pfsense.irj972.local.lan]/root: tcpdump -i igb4 -n -e\
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode\
listening on igb4, link-type EN10MB (Ethernet), capture size 65535 bytes\
capability mode sandbox enabled\
09:57:35.418721 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
09:57:43.603163 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
09:57:58.628668 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
09:58:10.300655 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
09:58:18.123653 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
09:58:23.094394 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.20 tell 86.5.163.20, length 28\
09:58:24.173118 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.1 tell 86.5.163.20, length 28\
09:58:35.209295 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
09:58:35.209350 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
09:58:38.615139 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
09:58:44.051533 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
09:58:57.754659 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
09:59:06.751717 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
09:59:13.412166 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
09:59:18.731217 0c:c4:7a:07:d3:4c > 33:33:00:01:00:02, ethertype IPv6 (0x86dd), length 98: fe80::ec4:7aff:fe07:d34c.546 > ff02::1:2.547: dhcp6 inf-req\
09:59:26.140115 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
09:59:31.140733 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.20 tell 86.5.163.20, length 28\
09:59:32.223387 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.1 tell 86.5.163.20, length 28\
09:59:43.099670 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
09:59:43.099728 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
09:59:44.077917 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
09:59:46.088837 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
09:59:49.509144 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
09:59:57.149148 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:00:06.264730 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:00:19.273645 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:00:19.351130 0c:c4:7a:07:d3:4c > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 86.6.30.1 tell 86.6.31.151, length 46\
10:00:19.359733 0c:c4:7a:07:d3:4c > 00:21:55:cb:93:da, ethertype IPv4 (0x0800), length 60: 86.6.31.151.445 > 88.245.242.252.51368: Flags [R.], seq 0, ack 1015706558, win 0, length 0\
10:00:19.965117 0c:c4:7a:07:d3:4c > 00:21:55:cb:93:da, ethertype IPv4 (0x0800), length 60: 86.6.31.151.445 > 88.245.242.252.51368: Flags [R.], seq 0, ack 1, win 0, length 0\
10:00:35.208162 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:00:39.237932 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.20 tell 86.5.163.20, length 28\
10:00:40.269642 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.1 tell 86.5.163.20, length 28\
10:00:51.191110 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:00:51.191172 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:00:56.973637 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:01:03.394341 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:01:15.448021 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:01:21.341961 0c:c4:7a:07:d3:4c > 33:33:00:01:00:02, ethertype IPv6 (0x86dd), length 98: fe80::ec4:7aff:fe07:d34c.546 > ff02::1:2.547: dhcp6 inf-req\
10:01:29.763758 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:01:47.534392 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.20 tell 86.5.163.20, length 28\
10:01:48.616219 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.1 tell 86.5.163.20, length 28\
10:01:59.638511 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:01:59.638551 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:02:01.667631 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:02:06.584692 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:02:19.586637 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:02:39.337677 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:02:56.233386 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.20 tell 86.5.163.20, length 28\
10:02:57.305638 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.1 tell 86.5.163.20, length 28\
10:03:08.335765 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:03:08.335819 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:03:10.351151 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:03:11.922575 0c:c4:7a:07:d3:4c > 33:33:00:01:00:02, ethertype IPv6 (0x86dd), length 98: fe80::ec4:7aff:fe07:d34c.546 > ff02::1:2.547: dhcp6 inf-req\
10:03:13.305153 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:03:21.435318 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:03:33.726134 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:03:52.614881 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:04:00.458869 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:04:05.499490 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.20 tell 86.5.163.20, length 28\
10:04:06.578226 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.1 tell 86.5.163.20, length 28\
plug\
10:04:32.843841 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:04:32.843897 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:04:33.201847 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:04:35.327642 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:04:36.352665 0c:c4:7a:07:d3:4c > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 590: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 0c:c4:7a:07:d3:4c, length 548\
10:04:36.452722 0c:c4:7a:07:d3:4c > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 590: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 0c:c4:7a:07:d3:4c, length 548\
10:04:36.823898 0c:c4:7a:07:d3:4c > 33:33:00:01:00:02, ethertype IPv6 (0x86dd), length 98: fe80::ec4:7aff:fe07:d34c.546 > ff02::1:2.547: dhcp6 inf-req\
10:04:37.792892 0c:c4:7a:07:d3:4c > 33:33:00:01:00:02, ethertype IPv6 (0x86dd), length 98: fe80::ec4:7aff:fe07:d34c.546 > ff02::1:2.547: dhcp6 inf-req\
10:04:37.802532 0c:c4:7a:07:d3:4c > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 86.6.30.1 tell 86.6.31.151, length 46\
10:04:37.809831 0c:c4:7a:07:d3:4c > 00:21:55:cb:93:da, ethertype IPv4 (0x0800), length 98: 86.6.31.151 > 86.6.30.1: ICMP echo request, id 15952, seq 0, length 64\
10:04:39.662854 0c:c4:7a:07:d3:4c > 33:33:00:01:00:02, ethertype IPv6 (0x86dd), length 98: fe80::ec4:7aff:fe07:d34c.546 > ff02::1:2.547: dhcp6 inf-req\
10:04:40.149097 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:04:43.492885 0c:c4:7a:07:d3:4c > 33:33:00:01:00:02, ethertype IPv6 (0x86dd), length 98: fe80::ec4:7aff:fe07:d34c.546 > ff02::1:2.547: dhcp6 inf-req\
10:04:51.112925 0c:c4:7a:07:d3:4c > 33:33:00:01:00:02, ethertype IPv6 (0x86dd), length 98: fe80::ec4:7aff:fe07:d34c.546 > ff02::1:2.547: dhcp6 inf-req\
10:04:53.403180 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:05:01.454914 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:05:06.433017 0c:c4:7a:07:d3:4c > 33:33:00:01:00:02, ethertype IPv6 (0x86dd), length 98: fe80::ec4:7aff:fe07:d34c.546 > ff02::1:2.547: dhcp6 inf-req\
10:05:16.568944 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:05:31.006009 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.20 tell 86.5.163.20, length 28\
10:05:32.084215 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.1 tell 86.5.163.20, length 28\
10:05:36.763168 0c:c4:7a:07:d3:4c > 33:33:00:01:00:02, ethertype IPv6 (0x86dd), length 98: fe80::ec4:7aff:fe07:d34c.546 > ff02::1:2.547: dhcp6 inf-req\
10:05:42.991497 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:05:42.991550 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:05:46.123125 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:05:54.073136 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:06:05.435315 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:06:25.476416 0c:c4:7a:07:d3:4c > 00:21:55:cb:93:da, ethertype IPv4 (0x0800), length 60: 86.6.31.151.8090 > 85.25.103.50.48863: Flags [R.], seq 0, ack 2944169830, win 0, length 0\
10:06:26.950954 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:06:30.473116 0c:c4:7a:07:d3:4c > 00:21:55:cb:93:da, ethertype ARP (0x0806), length 60: Request who-has 86.6.30.1 tell 86.6.31.151, length 46\
10:06:34.705132 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:06:35.403556 0c:c4:7a:07:d3:4c > 33:33:00:01:00:02, ethertype IPv6 (0x86dd), length 98: fe80::ec4:7aff:fe07:d34c.546 > ff02::1:2.547: dhcp6 inf-req\
10:06:39.277953 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.20 tell 86.5.163.20, length 28\
10:06:40.359274 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.1 tell 86.5.163.20, length 28\
10:06:51.435339 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:06:51.435393 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:06:56.447039 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:07:04.150797 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:07:15.495195 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:07:32.669738 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:07:48.579671 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.20 tell 86.5.163.20, length 28\
10:07:49.658274 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.1 tell 86.5.163.20, length 28\
10:08:00.441290 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:08:00.441346 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:08:02.588120 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:08:06.757112 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:08:17.938616 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:08:31.434178 0c:c4:7a:07:d3:4c > 33:33:00:01:00:02, ethertype IPv6 (0x86dd), length 98: fe80::ec4:7aff:fe07:d34c.546 > ff02::1:2.547: dhcp6 inf-req\
10:08:31.636630 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:08:52.910109 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:08:57.189611 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.20 tell 86.5.163.20, length 28\
10:08:58.206293 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.1 tell 86.5.163.20, length 28\
10:09:09.252909 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:09:09.252965 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:09:12.441116 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:09:21.008108 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:09:31.759107 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:09:47.408872 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:09:59.455601 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:10:05.158687 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.20 tell 86.5.163.20, length 28\
10:10:06.240233 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.1 tell 86.5.163.20, length 28\
10:10:17.329407 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:10:17.329464 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:10:22.501600 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:10:23.884892 0c:c4:7a:07:d3:4c > 33:33:00:01:00:02, ethertype IPv6 (0x86dd), length 98: fe80::ec4:7aff:fe07:d34c.546 > ff02::1:2.547: dhcp6 inf-req\
10:10:27.418331 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:10:37.353627 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
10:10:46.575595 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
^X10:11:02.327114 00:22:68:1f:74:81 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:22:68:1f:74:81, length 300\
^X^C\
128 packets captured\
128 packets received by filter\
0 packets dropped by kernel}

              so none of this brought my WAN interface back up so I REBOOTED pfsense,

              the netstat upon reboot….
              igb4 has disappeared completely....
              igb5 seems to have acquired the 10.10.10.1 address pfBlockerNG is using for DNSBL filtering (still in beta)

              [2.2-RELEASE][admin@pfsense.irj972.local.lan]/root: netstat -rn\
Routing tables\
\
Internet:\
Destination        Gateway            Flags      Netif Expire\
10.10.10.1         link#8             UHS         lo0\
10.10.10.1/32      link#8             U          igb5\
127.0.0.1          link#13            UH          lo0\
192.168.10.0/24    link#1             U          igb0\
192.168.10.1       link#1             UHS         lo0\
192.168.50.0/24    link#8             U          igb5\
192.168.50.1       link#8             UHS         lo0\
192.168.60.0/24    link#9             U          igb6\
192.168.60.1       link#9             UHS         lo0\
192.168.70.0/24    link#10            U          igb7\
192.168.70.1       link#10            UHS         lo0\
192.168.101.0/24   link#5             U           ix0\
192.168.101.1      link#5             UHS         lo0\
192.168.110.0/24   link#6             U           ix1\
192.168.110.1      link#6             UHS         lo0\
192.168.210.0/24   192.168.210.2      UGS      ovpns2\
192.168.210.1      link#15            UHS         lo0\
192.168.210.2      link#15            UH       ovpns2\
\
Internet6:\
Destination                       Gateway                       Flags      Netif Expire\
::1                               link#13                       UH          lo0\
fe80::%igb0/64                    link#1                        U          igb0\
fe80::a236:9fff:fe2d:eba8%igb0    link#1                        UHS         lo0\
fe80::%ix0/64                     link#5                        U           ix0\
fe80::92e2:baff:fe37:fba4%ix0     link#5                        UHS         lo0\
fe80::%ix1/64                     link#6                        U           ix1\
fe80::92e2:baff:fe37:fba5%ix1     link#6                        UHS         lo0\
fe80::%igb4/64                    link#7                        U          igb4\
fe80::222:68ff:fe1f:7481%igb4     link#7                        UHS         lo0\
fe80::%igb5/64                    link#8                        U          igb5\
fe80::ec4:7aff:fe07:d551%igb5     link#8                        UHS         lo0\
fe80::%igb6/64                    link#9                        U          igb6\
fe80::ec4:7aff:fe07:d552%igb6     link#9                        UHS         lo0\
fe80::%igb7/64                    link#10                       U          igb7\
fe80::ec4:7aff:fe07:d553%igb7     link#10                       UHS         lo0\
fe80::%lo0/64                     link#13                       U           lo0\
fe80::1%lo0                       link#13                       UHS         lo0\
fe80::%ovpns2/64                  link#15                       U        ovpns2\
fe80::a236:9fff:fe2d:eba8%ovpns2  link#15                       UHS         lo0\
fe80::%ovpnc1/64                  link#16                       U        ovpnc1\
fe80::a236:9fff:fe2d:eba8%ovpnc1  link#16                       UHS         lo0\
ff01::%igb0/32                    fe80::a236:9fff:fe2d:eba8%igb0 U          igb0\
ff01::%ix0/32                     fe80::92e2:baff:fe37:fba4%ix0 U           ix0\
ff01::%ix1/32                     fe80::92e2:baff:fe37:fba5%ix1 U           ix1\
ff01::%igb4/32                    fe80::222:68ff:fe1f:7481%igb4 U          igb4\
ff01::%igb5/32                    fe80::ec4:7aff:fe07:d551%igb5 U          igb5\
ff01::%igb6/32                    fe80::ec4:7aff:fe07:d552%igb6 U          igb6\
ff01::%igb7/32                    fe80::ec4:7aff:fe07:d553%igb7 U          igb7\
ff01::%lo0/32                     ::1                           U           lo0\
ff01::%ovpns2/32                  fe80::a236:9fff:fe2d:eba8%ovpns2 U        ovpns2\
ff01::%ovpnc1/32                  fe80::a236:9fff:fe2d:eba8%ovpnc1 U        ovpnc1\
ff02::%igb0/32                    fe80::a236:9fff:fe2d:eba8%igb0 U          igb0\
ff02::%ix0/32                     fe80::92e2:baff:fe37:fba4%ix0 U           ix0\
ff02::%ix1/32                     fe80::92e2:baff:fe37:fba5%ix1 U           ix1\
ff02::%igb4/32                    fe80::222:68ff:fe1f:7481%igb4 U          igb4\
ff02::%igb5/32                    fe80::ec4:7aff:fe07:d551%igb5 U          igb5\
ff02::%igb6/32                    fe80::ec4:7aff:fe07:d552%igb6 U          igb6\
ff02::%igb7/32                    fe80::ec4:7aff:fe07:d553%igb7 U          igb7\
ff02::%lo0/32                     ::1                           U           lo0\
ff02::%ovpns2/32                  fe80::a236:9fff:fe2d:eba8%ovpns2 U        ovpns2\
ff02::%ovpnc1/32                  fe80::a236:9fff:fe2d:eba8%ovpnc1 U        ovpnc1}

              this is the dhcpd.log upon reboot, DHCP seems to be working fine on LANs, just WAN still dead.
              (I recall the LED's on pfsense and my modem are on but steady and not blinking at this stage. )

              
Mar  2 10:15:02 pfsense dhclient: PREINIT\
Mar  2 10:15:02 pfsense dhclient: EXPIRE\
Mar  2 10:15:02 pfsense dhclient: Deleting old routes\
Mar  2 10:15:02 pfsense dhclient: PREINIT\
Mar  2 10:15:02 pfsense dhclient[17672]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 1\
Mar  2 10:15:02 pfsense dhclient[17672]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 2\
Mar  2 10:15:04 pfsense dhclient[17672]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 2\
Mar  2 10:15:06 pfsense dhclient[17672]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 2\
Mar  2 10:15:08 pfsense dhclient[17672]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 4\
Mar  2 10:15:12 pfsense dhclient[17672]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 4\
Mar  2 10:15:16 pfsense dhclient[17672]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 11\
Mar  2 10:15:27 pfsense dhclient[17672]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 7\
Mar  2 10:15:35 pfsense dhclient[17672]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 9\
Mar  2 10:15:44 pfsense dhclient[17672]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 14\
Mar  2 10:15:58 pfsense dhclient[17672]: No DHCPOFFERS received.\
Mar  2 10:15:58 pfsense dhclient[17672]: Trying recorded lease 86.5.163.20\
Mar  2 10:15:58 pfsense dhclient: TIMEOUT\
Mar  2 10:15:58 pfsense dhclient: Starting add_new_address()\
Mar  2 10:15:58 pfsense dhclient: ifconfig igb4 inet 86.5.163.20 netmask 255.255.255.0 broadcast 255.255.255.255\
Mar  2 10:15:58 pfsense dhclient: New IP Address (igb4): 86.5.163.20\
Mar  2 10:15:58 pfsense dhclient: New Subnet Mask (igb4): 255.255.255.0\
Mar  2 10:15:58 pfsense dhclient: New Broadcast Address (igb4): 255.255.255.255\
Mar  2 10:15:58 pfsense dhclient: New Routers (igb4): 86.5.163.1\
Mar  2 10:15:59 pfsense dhclient: New Routers (igb4): 86.5.163.1\
Mar  2 10:16:00 pfsense dhclient: Deleting old routes\
Mar  2 10:16:00 pfsense dhclient[17672]: bound: renewal in 238503 seconds.\
Mar  2 10:16:16 pfsense dhcpd: Internet Systems Consortium DHCP Server 4.2.6\
Mar  2 10:16:16 pfsense dhcpd: Copyright 2004-2014 Internet Systems Consortium.\
Mar  2 10:16:16 pfsense dhcpd: All rights reserved.\
Mar  2 10:16:16 pfsense dhcpd: For info, please visit https://www.isc.org/software/dhcp/\
Mar  2 10:16:16 pfsense dhcpd: Internet Systems Consortium DHCP Server 4.2.6\
Mar  2 10:16:16 pfsense dhcpd: Copyright 2004-2014 Internet Systems Consortium.\
Mar  2 10:16:16 pfsense dhcpd: All rights reserved.\
Mar  2 10:16:16 pfsense dhcpd: For info, please visit https://www.isc.org/software/dhcp/\
Mar  2 10:16:16 pfsense dhcpd: Wrote 0 deleted host decls to leases file.\
Mar  2 10:16:16 pfsense dhcpd: Wrote 0 new dynamic host decls to leases file.\
Mar  2 10:16:16 pfsense dhcpd: Wrote 45 leases to leases file.\
Mar  2 10:16:16 pfsense dhcpd: Listening on BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:16:16 pfsense dhcpd: Sending on   BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:16:16 pfsense dhcpd: Listening on BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:16:16 pfsense dhcpd: Sending on   BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:16:16 pfsense dhcpd: Listening on BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:16:16 pfsense dhcpd: Sending on   BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:16:16 pfsense dhcpd: Listening on BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:16:16 pfsense dhcpd: Sending on   BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:16:16 pfsense dhcpd: Listening on BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:16:16 pfsense dhcpd: Sending on   BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:16:16 pfsense dhcpd: Listening on BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:16:16 pfsense dhcpd: Sending on   BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:16:16 pfsense dhcpd: Sending on   Socket/fallback/fallback-net\
Mar  2 10:16:17 pfsense dhcpd: DHCPDISCOVER from 88:1f:a1:28:e5:db (irj-extreme) via igb7\
Mar  2 10:16:18 pfsense dhcpd: DHCPDISCOVER from 90:e2:ba:38:2e:3c via ix1\
Mar  2 10:16:18 pfsense dhcpd: DHCPOFFER on 192.168.110.10 to 90:e2:ba:38:2e:3c via ix1\
Mar  2 10:16:18 pfsense dhcpd: DHCPOFFER on 192.168.70.154 to 88:1f:a1:28:e5:db (irj-extreme) via igb7\
Mar  2 10:16:18 pfsense dhcpd: DHCPREQUEST for 192.168.70.154 (192.168.70.1) from 88:1f:a1:28:e5:db (irj-extreme) via igb7\
Mar  2 10:16:18 pfsense dhcpd: DHCPACK on 192.168.70.154 to 88:1f:a1:28:e5:db (irj-extreme) via igb7\
Mar  2 10:16:20 pfsense dhcpd: DHCPREQUEST for 192.168.110.10 (192.168.110.1) from 90:e2:ba:38:2e:3c via ix1\
Mar  2 10:16:20 pfsense dhcpd: DHCPACK on 192.168.110.10 to 90:e2:ba:38:2e:3c via ix1\
Mar  2 10:16:20 pfsense dhcpd: DHCPDISCOVER from 28:37:37:41:a0:f3 (ae111) via igb5\
Mar  2 10:16:21 pfsense dhcpd: DHCPOFFER on 192.168.50.135 to 28:37:37:41:a0:f3 (ae111) via igb5\
Mar  2 10:16:21 pfsense dhcpd: DHCPREQUEST for 192.168.50.135 (192.168.50.1) from 28:37:37:41:a0:f3 (ae111) via igb5\
Mar  2 10:16:21 pfsense dhcpd: DHCPACK on 192.168.50.135 to 28:37:37:41:a0:f3 (ae111) via igb5}

              that didn't fix it, so I rebooted the modem, leaving pfsense up…..

              1 Reply Last reply Reply Quote 0
              • Q
                q54e3w
                last edited by

                that didn't fix it, so I rebooted the modem, leaving pfsense up, at least this gets a DHCPACK back now.

                The virgin modem appears to boot in router mode, assigns itself 192.168.100.1 and then transitions at some point shortly after to routing mode and passes through the public IP (something like a 213.81.x.x… or 85.3.x.x...)
                I wonder if this 100.1 assignment is causing some DHCP weirdness as the modem goes through its initialisation and various boot up addresses?

                
Mar  2 10:27:36 pfsense dhclient: ARPSEND\
Mar  2 10:27:38 pfsense dhclient: ARPCHECK\
Mar  2 10:27:38 pfsense dhclient[98982]: DHCPREQUEST on igb4 to 255.255.255.255 port 67\
Mar  2 10:27:39 pfsense dhclient[98982]: DHCPACK from 192.168.100.1\
Mar  2 10:27:39 pfsense dhclient: BOUND\
Mar  2 10:27:39 pfsense dhclient: Starting add_new_address()\
Mar  2 10:27:39 pfsense dhclient: ifconfig igb4 inet 192.168.100.2 netmask 255.255.255.0 broadcast 192.168.100.255\
Mar  2 10:27:39 pfsense dhclient: New IP Address (igb4): 192.168.100.2\
Mar  2 10:27:39 pfsense dhclient: New Subnet Mask (igb4): 255.255.255.0\
Mar  2 10:27:39 pfsense dhclient: New Broadcast Address (igb4): 192.168.100.255\
Mar  2 10:27:39 pfsense dhclient: New Routers (igb4): 192.168.100.1\
Mar  2 10:27:39 pfsense dhclient: Adding new routes to interface: igb4\
Mar  2 10:27:39 pfsense dhclient: /sbin/route add default 192.168.100.1\
Mar  2 10:27:39 pfsense dhclient: Creating resolv.conf\
Mar  2 10:27:39 pfsense dhclient[98982]: bound to 192.168.100.2 -- renewal in 30 seconds.\
Mar  2 10:28:09 pfsense dhclient[40839]: DHCPREQUEST on igb4 to 192.168.100.1 port 67\
Mar  2 10:28:11 pfsense dhclient[40839]: DHCPREQUEST on igb4 to 192.168.100.1 port 67\
Mar  2 10:28:14 pfsense dhclient[40839]: DHCPREQUEST on igb4 to 192.168.100.1 port 67\
Mar  2 10:28:17 pfsense dhclient[40839]: DHCPREQUEST on igb4 to 192.168.100.1 port 67\
Mar  2 10:28:24 pfsense dhclient[40839]: DHCPREQUEST on igb4 to 192.168.100.1 port 67\
Mar  2 10:28:35 pfsense dhcpd: Received signal 15, initiating shutdown.\
Mar  2 10:28:35 pfsense dhcpd: Disabling output on BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:28:35 pfsense dhcpd: Disabling input on BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:28:35 pfsense dhcpd: Disabling output on BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:28:35 pfsense dhcpd: Disabling input on BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:28:35 pfsense dhcpd: Disabling output on BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:28:35 pfsense dhcpd: Disabling input on BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:28:35 pfsense dhcpd: Disabling output on BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:28:35 pfsense dhcpd: Disabling input on BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:28:35 pfsense dhcpd: Disabling output on BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:28:35 pfsense dhcpd: Disabling input on BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:28:35 pfsense dhcpd: Disabling output on BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:28:35 pfsense dhcpd: Disabling input on BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:28:36 pfsense dhclient[40839]: DHCPREQUEST on igb4 to 255.255.255.255 port 67\
Mar  2 10:28:36 pfsense dhcpd: Internet Systems Consortium DHCP Server 4.2.6\
Mar  2 10:28:36 pfsense dhcpd: Copyright 2004-2014 Internet Systems Consortium.\
Mar  2 10:28:36 pfsense dhcpd: All rights reserved.\
Mar  2 10:28:36 pfsense dhcpd: For info, please visit https://www.isc.org/software/dhcp/\
Mar  2 10:28:36 pfsense dhcpd: Internet Systems Consortium DHCP Server 4.2.6\
Mar  2 10:28:36 pfsense dhcpd: Copyright 2004-2014 Internet Systems Consortium.\
Mar  2 10:28:36 pfsense dhcpd: All rights reserved.\
Mar  2 10:28:36 pfsense dhcpd: For info, please visit https://www.isc.org/software/dhcp/\
Mar  2 10:28:36 pfsense dhcpd: Wrote 0 deleted host decls to leases file.\
Mar  2 10:28:36 pfsense dhcpd: Wrote 0 new dynamic host decls to leases file.\
Mar  2 10:28:36 pfsense dhcpd: Wrote 45 leases to leases file.\
Mar  2 10:28:36 pfsense dhcpd: Listening on BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:28:36 pfsense dhcpd: Sending on   BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:28:36 pfsense dhcpd: Listening on BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:28:36 pfsense dhcpd: Sending on   BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:28:36 pfsense dhcpd: Listening on BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:28:36 pfsense dhcpd: Sending on   BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:28:36 pfsense dhcpd: Listening on BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:28:36 pfsense dhcpd: Sending on   BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:28:36 pfsense dhcpd: Listening on BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:28:36 pfsense dhcpd: Sending on   BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:28:36 pfsense dhcpd: Listening on BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:28:36 pfsense dhcpd: Sending on   BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:28:36 pfsense dhcpd: Sending on   Socket/fallback/fallback-net\
Mar  2 10:28:36 pfsense dhclient[1281]: connection closed\
Mar  2 10:28:36 pfsense dhclient[1281]: exiting.\
Mar  2 10:28:42 pfsense dhclient: PREINIT\
Mar  2 10:28:42 pfsense dhclient[80861]: DHCPREQUEST on igb4 to 255.255.255.255 port 67\
Mar  2 10:28:43 pfsense dhclient: EXPIRE\
Mar  2 10:28:43 pfsense dhclient: Deleting old routes\
Mar  2 10:28:43 pfsense dhclient: PREINIT\
Mar  2 10:28:43 pfsense dhclient[80861]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 1\
Mar  2 10:28:44 pfsense dhclient[80861]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 1\
Mar  2 10:28:45 pfsense dhclient[80861]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 2\
Mar  2 10:28:47 pfsense dhclient[80861]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 4\
Mar  2 10:28:51 pfsense dhclient[80861]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 8\
Mar  2 10:28:59 pfsense dhclient[80861]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 17\
Mar  2 10:29:16 pfsense dhclient[80861]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 16}

                again still no joy, so I disconnected the coastal line, waited a few minutes and reconnected….

                1 Reply Last reply Reply Quote 0
                • Q
                  q54e3w
                  last edited by

                  again still no joy, so I disconnected the coaxial line which I understand can reset things at virgins end due to the MAC address reset. I waited a few minutes and reconnected the coax and captured this.
                  Would be good to have somebody confirm but it looks to me like the vrigin modem negotiates a DHCP lease from the virgin media GW.

                  [2.2-RELEASE][admin@pfsense.irj972.local.lan]/root: tcpdump -i igb4\
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode\
listening on igb4, link-type EN10MB (Ethernet), capture size 65535 bytes\
10:38:13.658310 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 101\
10:38:15.047877 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:38:15.086648 IP 10.27.136.1.bootps > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.bootpc: BOOTP/DHCP, Reply, length 316\
10:38:15.176944 ARP, Request who-has cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net tell cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net, length 28\
10:38:15.594105 ARP, Request who-has cpc72581-cmbg14-2-0-gw.5-4.cable.virginm.net tell cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net, length 28\
10:38:15.600021 ARP, Reply cpc72581-cmbg14-2-0-gw.5-4.cable.virginm.net is-at 00:21:55:cb:93:da (oui Unknown), length 46\
10:38:15.600036 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 117\
10:38:15.608152 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 117\
10:38:15.622611 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 117\
10:38:15.637099 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 101\
10:38:15.638239 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 117\
10:38:15.638511 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:15.638660 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:15.661244 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 117\
10:38:15.673595 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 101\
10:38:15.673712 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 101\
10:38:15.674048 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:15.674328 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:15.710833 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 101\
10:38:15.711183 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 533\
10:38:15.745467 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 117\
10:38:15.745911 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:15.759017 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 101\
10:38:15.759238 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:15.759287 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:15.790297 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 101\
10:38:15.818350 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 101\
10:38:15.818782 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:15.857357 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 245\
10:38:15.857697 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:15.858050 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 165\
10:38:15.899339 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 101\
10:38:15.951189 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net > cpc72581-cmbg14-2-0-gw.5-4.cable.virginm.net: ICMP echo request, id 130, seq 256, length 60\
10:38:15.957000 IP cpc72581-cmbg14-2-0-gw.5-4.cable.virginm.net > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net: ICMP echo reply, id 130, seq 256, length 60\
10:38:16.002543 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 101\
10:38:16.003158 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:16.041375 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 117\
10:38:16.041743 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:16.051124 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 133\
10:38:16.065174 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 133\
10:38:16.093319 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 245\
10:38:16.131283 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 101\
10:38:16.141407 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 101\
10:38:16.141935 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:16.179642 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 117\
10:38:16.180115 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:16.243918 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.61583 > k.root-servers.net.domain: 57511% [1au] NS? . (28)\
10:38:16.255615 IP k.root-servers.net.domain > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.61583: 57511*- 14/0/25 NS a.root-servers.net., NS b.root-servers.net., NS c.root-servers.net., NS d.root-servers.net., NS e.root-servers.net., NS f.root-servers.net., NS g.root-servers.net., NS h.root-servers.net., NS i.root-servers.net., NS j.root-servers.net., NS k.root-servers.net., NS l.root-servers.net., NS m.root-servers.net., RRSIG (913)\
10:38:16.256152 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.50492 > l.root-servers.net.domain: 12578% [1au] DNSKEY? . (28)\
10:38:16.278963 IP l.root-servers.net.domain > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.50492: 12578*- 3/0/1 DNSKEY, DNSKEY, RRSIG (736)\
10:38:16.536884 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 117\
10:38:16.577165 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 101\
10:38:16.577512 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:16.615412 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 165\
10:38:16.615899 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:16.656012 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.60824 > M.ROOT-SERVERS.NET.domain: 30021% [1au] NS? . (28)\
10:38:16.667146 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 149\
10:38:16.685334 IP M.ROOT-SERVERS.NET.domain > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.60824: 30021*- 14/0/25 NS b.root-servers.net., NS i.root-servers.net., NS l.root-servers.net., NS g.root-servers.net., NS a.root-servers.net., NS f.root-servers.net., NS c.root-servers.net., NS e.root-servers.net., NS k.root-servers.net., NS m.root-servers.net., NS h.root-servers.net., NS d.root-servers.net., NS j.root-servers.net., RRSIG (913)\
10:38:16.685924 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.26257 > M.ROOT-SERVERS.NET.domain: 8122% [1au] DNSKEY? . (28)\
10:38:16.713171 IP M.ROOT-SERVERS.NET.domain > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.26257: 8122*- 3/0/1 DNSKEY, DNSKEY, RRSIG (736)\
10:38:16.729432 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 101\
10:38:16.729823 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:16.768085 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 117\
10:38:16.768440 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:17.006453 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net > cpc72581-cmbg14-2-0-gw.5-4.cable.virginm.net: ICMP echo request, id 130, seq 512, length 60\
10:38:17.013215 IP cpc72581-cmbg14-2-0-gw.5-4.cable.virginm.net > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net: ICMP echo reply, id 130, seq 512, length 60\
10:38:17.053584 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 133\
10:38:17.067222 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 133\
10:38:18.065828 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net > cpc72581-cmbg14-2-0-gw.5-4.cable.virginm.net: ICMP echo request, id 130, seq 768, length 60\
10:38:18.065999 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 133\
10:38:18.071851 IP cpc72581-cmbg14-2-0-gw.5-4.cable.virginm.net > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net: ICMP echo reply, id 130, seq 768, length 60\
10:38:18.079356 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 133\
10:38:18.427756 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 0c:c4:7a:07:d3:4c (oui Unknown), length 548\
10:38:19.121650 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net > cpc72581-cmbg14-2-0-gw.5-4.cable.virginm.net: ICMP echo request, id 130, seq 1024, length 60\
10:38:19.121814 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 133\
10:38:19.127987 IP cpc72581-cmbg14-2-0-gw.5-4.cable.virginm.net > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net: ICMP echo reply, id 130, seq 1024, length 60\
10:38:19.135479 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 133\
10:38:19.924837 ARP, Request who-has cpc72581-cmbg14-2-0-gw.5-4.cable.virginm.net tell cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net, length 28\
10:38:19.930943 ARP, Reply cpc72581-cmbg14-2-0-gw.5-4.cable.virginm.net is-at 00:21:55:cb:93:da (oui Unknown), length 46\
10:38:19.930958 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 117\
10:38:20.122180 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net > cpc72581-cmbg14-2-0-gw.5-4.cable.virginm.net: ICMP echo request, id 130, seq 1280, length 60\
10:38:20.122361 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 133\
10:38:20.127772 IP cpc72581-cmbg14-2-0-gw.5-4.cable.virginm.net > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net: ICMP echo reply, id 130, seq 1280, length 60\
10:38:20.140226 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 133\
10:38:20.202386 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 197\
10:38:20.202910 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 117\
10:38:20.237363 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 325\
10:38:20.479222 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 101\
10:38:20.479742 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:20.518208 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 309\
10:38:20.518523 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:20.518705 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 117\
10:38:20.519222 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 117\
10:38:20.519381 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 117\
10:38:20.519653 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 117\
10:38:20.550474 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 117\
10:38:20.550962 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:20.551048 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 181\
10:38:20.551876 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 117\
10:38:20.552117 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:20.552188 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 181\
10:38:20.582866 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 181\
10:38:20.583145 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 149\
10:38:20.583818 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 181\
10:38:20.584054 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 181\
10:38:20.598241 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 101\
10:38:20.614806 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 165\
10:38:20.615144 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:20.615355 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 117\
10:38:20.617676 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 149\
10:38:20.617990 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:20.618234 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 117\
10:38:20.651157 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 117\
10:38:20.652043 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 133\
10:38:21.517359 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 0c:c4:7a:07:d3:4c (oui Unknown), length 548\
10:38:24.607424 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 0c:c4:7a:07:d3:4c (oui Unknown), length 548\
10:38:25.145919 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:38:25.414180 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:38:26.137660 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:38:28.084075 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 101\
10:38:28.084266 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:38:28.123458 IP 10.27.136.1.bootps > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.bootpc: BOOTP/DHCP, Reply, length 316\
10:38:28.136368 ARP, Request who-has cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net tell cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net, length 28\
10:38:28.266095 ARP, Request who-has cpc72581-cmbg14-2-0-gw.5-4.cable.virginm.net tell cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net, length 28\
10:38:28.272086 ARP, Reply cpc72581-cmbg14-2-0-gw.5-4.cable.virginm.net is-at 00:21:55:cb:93:da (oui Unknown), length 46\
10:38:28.272103 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 117\
10:38:28.324193 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 117\
10:38:28.339882 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 165\
10:38:28.341461 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 117\
10:38:28.619894 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 197\
10:38:28.620442 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 117\
10:38:28.635640 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 325\
10:38:28.636499 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 117\
10:38:28.655552 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 117\
10:38:28.666238 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 565\
10:38:28.666875 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 117\
10:38:28.682244 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 101\
10:38:28.682560 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:28.682601 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 421\
10:38:28.683123 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 117\
10:38:28.689463 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 117\
10:38:28.720179 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 101\
10:38:28.720432 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 101\
10:38:28.986263 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 373\
10:38:28.986926 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 117\
10:38:29.001284 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 165\
10:38:29.171210 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081 > 84.39.116.179.http: UDP, length 133\
10:38:29.186619 IP 84.39.116.179.http > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.13081: UDP, length 133\
10:38:29.199276 IP cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.54228 > e.root-servers.net.domain: 58019% [1au] NS? . (28)\
10:38:29.213551 IP e.root-servers.net.domain > cpc72581-cmbg14-2-0-cust19.5-4.cable.virginm.net.54228: 58019*- 14/0/25 NS a.root-servers.net., NS b.root-servers.net., NS c.root-servers.net., NS d.root-servers.net., NS e.root-servers.net., NS f.root-servers.net., NS g.root-servers.net., NS h.root-servers.net., NS i.root-servers.net., NS j.root-servers.net., NS k.root-servers.net., NS l.root-servers.net., NS m.root-servers.net., RRSIG (913)}

                  and the dhcp.log, still pfSense struggling to find its feet.

                  Mar  2 10:29:56 pfsense dhclient: PREINIT\
Mar  2 10:29:56 pfsense dhclient: EXPIRE\
Mar  2 10:29:56 pfsense dhclient: Deleting old routes\
Mar  2 10:29:56 pfsense dhclient: PREINIT\
Mar  2 10:29:56 pfsense dhclient[60333]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 2\
Mar  2 10:29:56 pfsense dhclient[60333]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 2\
Mar  2 10:29:58 pfsense dhclient[60333]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 4\
Mar  2 10:30:02 pfsense dhclient[60333]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 9\
Mar  2 10:30:11 pfsense dhclient[60333]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 8\
Mar  2 10:30:19 pfsense dhclient[60333]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 11\
Mar  2 10:30:30 pfsense dhclient[60333]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 19\
Mar  2 10:30:49 pfsense dhclient[60333]: DHCPDISCOVER on igb4 to 255.255.255.255 port 67 interval 4\
Mar  2 10:30:53 pfsense dhclient[60333]: No DHCPOFFERS received.\
Mar  2 10:30:53 pfsense dhclient[60333]: Trying recorded lease 86.5.163.20\
Mar  2 10:30:53 pfsense dhclient: TIMEOUT\
Mar  2 10:30:53 pfsense dhclient: Starting add_new_address()\
Mar  2 10:30:53 pfsense dhclient: ifconfig igb4 inet 86.5.163.20 netmask 255.255.255.0 broadcast 255.255.255.255\
Mar  2 10:30:53 pfsense dhclient: New IP Address (igb4): 86.5.163.20\
Mar  2 10:30:53 pfsense dhclient: New Subnet Mask (igb4): 255.255.255.0\
Mar  2 10:30:53 pfsense dhclient: New Broadcast Address (igb4): 255.255.255.255\
Mar  2 10:30:53 pfsense dhclient: New Routers (igb4): 86.5.163.1\
Mar  2 10:30:54 pfsense dhclient: New Routers (igb4): 86.5.163.1\
Mar  2 10:30:55 pfsense dhclient: Deleting old routes\
Mar  2 10:30:55 pfsense dhclient[60333]: bound: renewal in 237608 seconds.\
Mar  2 10:30:58 pfsense dhcpd: Received signal 15, initiating shutdown.\
Mar  2 10:30:58 pfsense dhcpd: Disabling output on BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:30:58 pfsense dhcpd: Disabling input on BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:30:58 pfsense dhcpd: Disabling output on BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:30:58 pfsense dhcpd: Disabling input on BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:30:58 pfsense dhcpd: Disabling output on BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:30:58 pfsense dhcpd: Disabling input on BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:30:58 pfsense dhcpd: Disabling output on BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:30:58 pfsense dhcpd: Disabling input on BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:30:58 pfsense dhcpd: Disabling output on BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:30:58 pfsense dhcpd: Disabling input on BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:30:58 pfsense dhcpd: Disabling output on BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:30:58 pfsense dhcpd: Disabling input on BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:30:58 pfsense dhclient[175]: igb4 link state up -> down\
Mar  2 10:30:59 pfsense dhcpd: Internet Systems Consortium DHCP Server 4.2.6\
Mar  2 10:30:59 pfsense dhcpd: Copyright 2004-2014 Internet Systems Consortium.\
Mar  2 10:30:59 pfsense dhcpd: All rights reserved.\
Mar  2 10:30:59 pfsense dhcpd: For info, please visit https://www.isc.org/software/dhcp/\
Mar  2 10:30:59 pfsense dhcpd: Internet Systems Consortium DHCP Server 4.2.6\
Mar  2 10:30:59 pfsense dhcpd: Copyright 2004-2014 Internet Systems Consortium.\
Mar  2 10:30:59 pfsense dhcpd: All rights reserved.\
Mar  2 10:30:59 pfsense dhcpd: For info, please visit https://www.isc.org/software/dhcp/\
Mar  2 10:30:59 pfsense dhcpd: Wrote 0 deleted host decls to leases file.\
Mar  2 10:30:59 pfsense dhcpd: Wrote 0 new dynamic host decls to leases file.\
Mar  2 10:30:59 pfsense dhcpd: Wrote 45 leases to leases file.\
Mar  2 10:30:59 pfsense dhcpd: Listening on BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:30:59 pfsense dhcpd: Sending on   BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:30:59 pfsense dhcpd: Listening on BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:30:59 pfsense dhcpd: Sending on   BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:30:59 pfsense dhcpd: Listening on BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:30:59 pfsense dhcpd: Sending on   BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:30:59 pfsense dhcpd: Listening on BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:30:59 pfsense dhcpd: Sending on   BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:30:59 pfsense dhcpd: Listening on BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:30:59 pfsense dhcpd: Sending on   BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:30:59 pfsense dhcpd: Listening on BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:30:59 pfsense dhcpd: Sending on   BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:30:59 pfsense dhcpd: Sending on   Socket/fallback/fallback-net\
Mar  2 10:30:59 pfsense dhclient[71056]: connection closed\
Mar  2 10:30:59 pfsense dhclient[71056]: exiting.\
Mar  2 10:31:09 pfsense dhcpd: DHCPREQUEST for 192.168.70.103 from 68:96:7b:a4:cf:8e (iPhone7) via igb7\
Mar  2 10:31:09 pfsense dhcpd: DHCPACK on 192.168.70.103 to 68:96:7b:a4:cf:8e (iPhone7) via igb7\
Mar  2 10:31:15 pfsense dhcpd: Received signal 15, initiating shutdown.\
Mar  2 10:31:15 pfsense dhcpd: Disabling output on BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:31:15 pfsense dhcpd: Disabling input on BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:31:15 pfsense dhcpd: Disabling output on BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:31:15 pfsense dhcpd: Disabling input on BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:31:15 pfsense dhcpd: Disabling output on BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:31:15 pfsense dhcpd: Disabling input on BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:31:15 pfsense dhcpd: Disabling output on BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:31:15 pfsense dhcpd: Disabling input on BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:31:15 pfsense dhcpd: Disabling output on BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:31:15 pfsense dhcpd: Disabling input on BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:31:15 pfsense dhcpd: Disabling output on BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:31:15 pfsense dhcpd: Disabling input on BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:31:16 pfsense dhcpd: Internet Systems Consortium DHCP Server 4.2.6\
Mar  2 10:31:16 pfsense dhcpd: Copyright 2004-2014 Internet Systems Consortium.\
Mar  2 10:31:16 pfsense dhcpd: All rights reserved.\
Mar  2 10:31:16 pfsense dhcpd: For info, please visit https://www.isc.org/software/dhcp/\
Mar  2 10:31:16 pfsense dhcpd: Internet Systems Consortium DHCP Server 4.2.6\
Mar  2 10:31:16 pfsense dhcpd: Copyright 2004-2014 Internet Systems Consortium.\
Mar  2 10:31:16 pfsense dhcpd: All rights reserved.\
Mar  2 10:31:16 pfsense dhcpd: For info, please visit https://www.isc.org/software/dhcp/\
Mar  2 10:31:16 pfsense dhcpd: Wrote 0 deleted host decls to leases file.\
Mar  2 10:31:16 pfsense dhcpd: Wrote 0 new dynamic host decls to leases file.\
Mar  2 10:31:16 pfsense dhcpd: Wrote 45 leases to leases file.\
Mar  2 10:31:16 pfsense dhcpd: Listening on BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:31:16 pfsense dhcpd: Sending on   BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:31:16 pfsense dhcpd: Listening on BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:31:16 pfsense dhcpd: Sending on   BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:31:16 pfsense dhcpd: Listening on BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:31:16 pfsense dhcpd: Sending on   BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:31:16 pfsense dhcpd: Listening on BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:31:16 pfsense dhcpd: Sending on   BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:31:16 pfsense dhcpd: Listening on BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:31:16 pfsense dhcpd: Sending on   BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:31:16 pfsense dhcpd: Listening on BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:31:16 pfsense dhcpd: Sending on   BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:31:16 pfsense dhcpd: Sending on   Socket/fallback/fallback-net\
Mar  2 10:31:31 pfsense dhcpd: Received signal 15, initiating shutdown.\
Mar  2 10:31:31 pfsense dhcpd: Disabling output on BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:31:31 pfsense dhcpd: Disabling input on BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:31:31 pfsense dhcpd: Disabling output on BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:31:31 pfsense dhcpd: Disabling input on BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:31:31 pfsense dhcpd: Disabling output on BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:31:31 pfsense dhcpd: Disabling input on BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:31:31 pfsense dhcpd: Disabling output on BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:31:31 pfsense dhcpd: Disabling input on BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:31:31 pfsense dhcpd: Disabling output on BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:31:31 pfsense dhcpd: Disabling input on BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:31:31 pfsense dhcpd: Disabling output on BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:31:31 pfsense dhcpd: Disabling input on BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:31:33 pfsense dhcpd: Internet Systems Consortium DHCP Server 4.2.6\
Mar  2 10:31:33 pfsense dhcpd: Copyright 2004-2014 Internet Systems Consortium.\
Mar  2 10:31:33 pfsense dhcpd: All rights reserved.\
Mar  2 10:31:33 pfsense dhcpd: For info, please visit https://www.isc.org/software/dhcp/\
Mar  2 10:31:33 pfsense dhcpd: Internet Systems Consortium DHCP Server 4.2.6\
Mar  2 10:31:33 pfsense dhcpd: Copyright 2004-2014 Internet Systems Consortium.\
Mar  2 10:31:33 pfsense dhcpd: All rights reserved.\
Mar  2 10:31:33 pfsense dhcpd: For info, please visit https://www.isc.org/software/dhcp/\
Mar  2 10:31:33 pfsense dhcpd: Wrote 0 deleted host decls to leases file.\
Mar  2 10:31:33 pfsense dhcpd: Wrote 0 new dynamic host decls to leases file.\
Mar  2 10:31:33 pfsense dhcpd: Wrote 45 leases to leases file.\
Mar  2 10:31:33 pfsense dhcpd: Listening on BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:31:33 pfsense dhcpd: Sending on   BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:31:33 pfsense dhcpd: Listening on BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:31:33 pfsense dhcpd: Sending on   BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:31:33 pfsense dhcpd: Listening on BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:31:33 pfsense dhcpd: Sending on   BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:31:33 pfsense dhcpd: Listening on BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:31:33 pfsense dhcpd: Sending on   BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:31:33 pfsense dhcpd: Listening on BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:31:33 pfsense dhcpd: Sending on   BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:31:33 pfsense dhcpd: Listening on BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:31:33 pfsense dhcpd: Sending on   BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:31:33 pfsense dhcpd: Sending on   Socket/fallback/fallback-net\
Mar  2 10:31:48 pfsense dhcpd: Received signal 15, initiating shutdown.\
Mar  2 10:31:48 pfsense dhcpd: Disabling output on BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:31:48 pfsense dhcpd: Disabling input on BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:31:48 pfsense dhcpd: Disabling output on BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:31:48 pfsense dhcpd: Disabling input on BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:31:48 pfsense dhcpd: Disabling output on BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:31:48 pfsense dhcpd: Disabling input on BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:31:48 pfsense dhcpd: Disabling output on BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:31:48 pfsense dhcpd: Disabling input on BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:31:48 pfsense dhcpd: Disabling output on BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:31:48 pfsense dhcpd: Disabling input on BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:31:48 pfsense dhcpd: Disabling output on BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:31:48 pfsense dhcpd: Disabling input on BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:31:49 pfsense dhcpd: Internet Systems Consortium DHCP Server 4.2.6\
Mar  2 10:31:49 pfsense dhcpd: Copyright 2004-2014 Internet Systems Consortium.\
Mar  2 10:31:49 pfsense dhcpd: All rights reserved.\
Mar  2 10:31:49 pfsense dhcpd: For info, please visit https://www.isc.org/software/dhcp/\
Mar  2 10:31:49 pfsense dhcpd: Internet Systems Consortium DHCP Server 4.2.6\
Mar  2 10:31:49 pfsense dhcpd: Copyright 2004-2014 Internet Systems Consortium.\
Mar  2 10:31:49 pfsense dhcpd: All rights reserved.\
Mar  2 10:31:49 pfsense dhcpd: For info, please visit https://www.isc.org/software/dhcp/\
Mar  2 10:31:49 pfsense dhcpd: Wrote 0 deleted host decls to leases file.\
Mar  2 10:31:49 pfsense dhcpd: Wrote 0 new dynamic host decls to leases file.\
Mar  2 10:31:49 pfsense dhcpd: Wrote 45 leases to leases file.\
Mar  2 10:31:49 pfsense dhcpd: Listening on BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:31:49 pfsense dhcpd: Sending on   BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:31:49 pfsense dhcpd: Listening on BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:31:49 pfsense dhcpd: Sending on   BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:31:49 pfsense dhcpd: Listening on BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:31:49 pfsense dhcpd: Sending on   BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:31:49 pfsense dhcpd: Listening on BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:31:49 pfsense dhcpd: Sending on   BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:31:49 pfsense dhcpd: Listening on BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:31:49 pfsense dhcpd: Sending on   BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:31:49 pfsense dhcpd: Listening on BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:31:49 pfsense dhcpd: Sending on   BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:31:49 pfsense dhcpd: Sending on   Socket/fallback/fallback-net\
Mar  2 10:31:49 pfsense dhclient[47596]: dhclient already running, pid: 47434.\
Mar  2 10:31:49 pfsense dhclient[47596]: exiting.\
Mar  2 10:32:04 pfsense dhcpd: Received signal 15, initiating shutdown.\
Mar  2 10:32:04 pfsense dhcpd: Disabling output on BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:32:04 pfsense dhcpd: Disabling input on BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:32:04 pfsense dhcpd: Disabling output on BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:32:04 pfsense dhcpd: Disabling input on BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:32:04 pfsense dhcpd: Disabling output on BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:32:04 pfsense dhcpd: Disabling input on BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:32:04 pfsense dhcpd: Disabling output on BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:32:04 pfsense dhcpd: Disabling input on BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:32:04 pfsense dhcpd: Disabling output on BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:32:04 pfsense dhcpd: Disabling input on BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:32:04 pfsense dhcpd: Disabling output on BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:32:04 pfsense dhcpd: Disabling input on BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:32:05 pfsense dhcpd: Internet Systems Consortium DHCP Server 4.2.6\
Mar  2 10:32:05 pfsense dhcpd: Copyright 2004-2014 Internet Systems Consortium.\
Mar  2 10:32:05 pfsense dhcpd: All rights reserved.\
Mar  2 10:32:05 pfsense dhcpd: For info, please visit https://www.isc.org/software/dhcp/\
Mar  2 10:32:05 pfsense dhcpd: Internet Systems Consortium DHCP Server 4.2.6\
Mar  2 10:32:05 pfsense dhcpd: Copyright 2004-2014 Internet Systems Consortium.\
Mar  2 10:32:05 pfsense dhcpd: All rights reserved.\
Mar  2 10:32:05 pfsense dhcpd: For info, please visit https://www.isc.org/software/dhcp/\
Mar  2 10:32:05 pfsense dhcpd: Wrote 0 deleted host decls to leases file.\
Mar  2 10:32:05 pfsense dhcpd: Wrote 0 new dynamic host decls to leases file.\
Mar  2 10:32:05 pfsense dhcpd: Wrote 45 leases to leases file.\
Mar  2 10:32:05 pfsense dhcpd: Listening on BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:32:05 pfsense dhcpd: Sending on   BPF/igb0/a0:36:9f:2d:eb:a8/192.168.10.0/24\
Mar  2 10:32:05 pfsense dhcpd: Listening on BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:32:05 pfsense dhcpd: Sending on   BPF/ix1/90:e2:ba:37:fb:a5/192.168.110.0/24\
Mar  2 10:32:05 pfsense dhcpd: Listening on BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:32:05 pfsense dhcpd: Sending on   BPF/ix0/90:e2:ba:37:fb:a4/192.168.101.0/24\
Mar  2 10:32:05 pfsense dhcpd: Listening on BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:32:05 pfsense dhcpd: Sending on   BPF/igb6/0c:c4:7a:07:d5:52/192.168.60.0/24\
Mar  2 10:32:05 pfsense dhcpd: Listening on BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:32:05 pfsense dhcpd: Sending on   BPF/igb7/0c:c4:7a:07:d5:53/192.168.70.0/24\
Mar  2 10:32:05 pfsense dhcpd: Listening on BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:32:05 pfsense dhcpd: Sending on   BPF/igb5/0c:c4:7a:07:d5:51/192.168.50.0/24\
Mar  2 10:32:05 pfsense dhcpd: Sending on   Socket/fallback/fallback-net\
Mar  2 10:33:03 pfsense dhcpd: DHCPREQUEST for 192.168.50.104 from 8c:70:5a:68:8f:6c (t420) via igb5\
Mar  2 10:33:03 pfsense dhcpd: DHCPACK on 192.168.50.104 to 8c:70:5a:68:8f:6c (t420) via igb5\

                  and a packet capture of the WAN interface which showed it seemed to be progressing at this point although still not active.
                  The ping to 10.40.0.1 is a getaway ping to a VPN DNS server

                  
10:50:02.460055 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 70: 86.5.163.20.37612 > 199.7.83.42.domain: 58016% [1au] DNSKEY? . (28)\
10:50:02.483860 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 778: 199.7.83.42.domain > 86.5.163.20.37612: 58016*- 3/0/1 DNSKEY, DNSKEY, RRSIG (736)\
10:50:02.808637 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 83: 86.5.163.20.4709 > 10.6.0.1.domain: 53865+ PTR? 4.0.41.198.in-addr.arpa. (41)\
10:50:03.345093 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 49410, length 60\
10:50:04.365906 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 49666, length 60\
10:50:05.427545 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 49922, length 60\
10:50:05.491557 0c:c4:7a:07:d3:4c (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 590: 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 0c:c4:7a:07:d3:4c (oui Unknown), length 548\
10:50:06.455536 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.1 tell 86.5.163.20, length 28\
10:50:06.474062 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype ARP (0x0806), length 60: Reply 86.5.163.1 is-at 00:21:55:cb:93:da (oui Unknown), length 46\
10:50:06.474076 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 50178, length 60\
10:50:08.581018 0c:c4:7a:07:d3:4c (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 590: 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 0c:c4:7a:07:d3:4c (oui Unknown), length 548\
10:50:11.194770 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 342: 86.5.163.20.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:50:11.643708 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 342: 86.5.163.20.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:50:12.570778 0c:c4:7a:07:d3:4c (oui Unknown) > 33:33:00:01:00:02 (oui Unknown), ethertype IPv6 (0x86dd), length 98: fe80::ec4:7aff:fe07:d34c.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 inf-req\
10:50:13.018553 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 342: 86.5.163.20.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:50:15.334642 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 342: 86.5.163.20.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:50:15.371990 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 358: 10.27.136.1.bootps > 86.5.163.20.bootpc: BOOTP/DHCP, Reply, length 316\
10:50:15.384957 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.20 tell 86.5.163.20, length 28\
10:50:15.780096 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.1 tell 86.5.163.20, length 28\
10:50:15.787368 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype ARP (0x0806), length 60: Reply 86.5.163.1 is-at 00:21:55:cb:93:da (oui Unknown), length 46\
10:50:15.787379 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 52482, length 60\
10:50:16.515551 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 70: 86.5.163.20.64443 > 192.36.148.17.domain: 46729% [1au] NS? . (28)\
10:50:16.540247 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 955: 192.36.148.17.domain > 86.5.163.20.64443: 46729*- 14/0/25 NS h.root-servers.net., NS e.root-servers.net., NS m.root-servers.net., NS g.root-servers.net., NS d.root-servers.net., NS f.root-servers.net., NS k.root-servers.net., NS c.root-servers.net., NS i.root-servers.net., NS b.root-servers.net., NS a.root-servers.net., NS l.root-servers.net., NS j.root-servers.net., RRSIG (913)}
                  1 Reply Last reply Reply Quote 0
                  • Q
                    q54e3w
                    last edited by

                    I'm not sure if this relates but it happened at about the time the WAN came back to life. webgui access was slow so I had opened a new SSH to pfSense and restarted php and webgui (options 16 & 11). I was packet capturing igb4 when it came back up, perhaps the answer lies in here somewhere????

                    [2.2-RELEASE][admin@pfsense.irj972.local.lan]/root: tcpdump -i igb4 -e\
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode\
listening on igb4, link-type EN10MB (Ethernet), capture size 65535 bytes\
10:54:06.082443 0c:c4:7a:07:d3:4c (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 590: 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 0c:c4:7a:07:d3:4c (oui Unknown), length 548\
10:54:08.334709 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 342: 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:54:08.382180 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 358: 10.27.136.1.bootps > 86.5.163.20.bootpc: BOOTP/DHCP, Reply, length 316\
10:54:10.414556 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 342: 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:54:10.431928 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 358: 10.27.136.1.bootps > 86.5.163.20.bootpc: BOOTP/DHCP, Reply, length 316\
10:54:10.445186 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.20 tell 86.5.163.20, length 28\
10:54:10.526505 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.1 tell 86.5.163.20, length 28\
10:54:10.533724 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype ARP (0x0806), length 60: Reply 86.5.163.1 is-at 00:21:55:cb:93:da (oui Unknown), length 46\
10:54:10.533755 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 70: 86.5.163.20.60949 > 199.7.83.42.domain: 1572% [1au] NS? . (28)\
10:54:10.556539 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 955: 199.7.83.42.domain > 86.5.163.20.60949: 1572*- 14/0/25 NS a.root-servers.net., NS b.root-servers.net., NS c.root-servers.net., NS d.root-servers.net., NS e.root-servers.net., NS f.root-servers.net., NS g.root-servers.net., NS h.root-servers.net., NS i.root-servers.net., NS j.root-servers.net., NS k.root-servers.net., NS l.root-servers.net., NS m.root-servers.net., RRSIG (913)\
10:54:10.958970 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 83: 86.5.163.20.27346 > 10.6.0.1.domain: 3982+ PTR? 1.163.5.86.in-addr.arpa. (41)\
10:54:11.471532 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 45315, length 60\
10:54:11.573864 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 70: 86.5.163.20.53673 > 128.63.2.53.domain: 16340% [1au] NS? . (28)\
10:54:11.670936 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 955: 128.63.2.53.domain > 86.5.163.20.53673: 16340*- 14/0/25 NS a.root-servers.net., NS b.root-servers.net., NS c.root-servers.net., NS d.root-servers.net., NS e.root-servers.net., NS f.root-servers.net., NS g.root-servers.net., NS h.root-servers.net., NS i.root-servers.net., NS j.root-servers.net., NS k.root-servers.net., NS l.root-servers.net., NS m.root-servers.net., RRSIG (913)\
10:54:11.671566 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 70: 86.5.163.20.52571 > 128.63.2.53.domain: 57284% [1au] DNSKEY? . (28)\
10:54:11.766351 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 778: 128.63.2.53.domain > 86.5.163.20.52571: 57284*- 3/0/1 DNSKEY, DNSKEY, RRSIG (736)\
10:54:12.471524 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 45571, length 60\
10:54:13.532080 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 45827, length 60\
10:54:14.571331 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 46083, length 60\
10:54:15.593151 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.1 tell 86.5.163.20, length 28\
10:54:15.600351 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype ARP (0x0806), length 60: Reply 86.5.163.1 is-at 00:21:55:cb:93:da (oui Unknown), length 46\
10:54:15.600366 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 46339, length 60\
10:54:16.037663 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 83: 86.5.163.20.11119 > 208.67.222.222.domain: 3982+ PTR? 1.163.5.86.in-addr.arpa. (41)\
10:54:20.598352 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 342: 86.5.163.20.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:54:20.730431 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 342: 86.5.163.20.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:54:21.787229 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 342: 86.5.163.20.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:54:23.893674 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 342: 86.5.163.20.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:54:23.933139 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 358: 10.27.136.1.bootps > 86.5.163.20.bootpc: BOOTP/DHCP, Reply, length 316\
10:54:23.946232 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.20 tell 86.5.163.20, length 28\
10:54:24.894081 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.1 tell 86.5.163.20, length 28\
10:54:24.899870 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype ARP (0x0806), length 60: Reply 86.5.163.1 is-at 00:21:55:cb:93:da (oui Unknown), length 46\
10:54:24.899886 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 48643, length 60\
10:54:25.075941 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 70: 86.5.163.20.7830 > 199.7.91.13.domain: 5900% [1au] NS? . (28)\
10:54:25.104182 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 955: 199.7.91.13.domain > 86.5.163.20.7830: 5900*- 14/0/25 NS j.root-servers.net., NS a.root-servers.net., NS l.root-servers.net., NS b.root-servers.net., NS c.root-servers.net., NS i.root-servers.net., NS e.root-servers.net., NS g.root-servers.net., NS d.root-servers.net., NS k.root-servers.net., NS h.root-servers.net., NS m.root-servers.net., NS f.root-servers.net., RRSIG (913)\
10:54:25.104697 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 70: 86.5.163.20.14951 > 193.0.14.129.domain: 12171% [1au] DNSKEY? . (28)\
10:54:25.119198 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 778: 193.0.14.129.domain > 86.5.163.20.14951: 12171*- 3/0/1 DNSKEY, DNSKEY, RRSIG (736)\
10:54:25.354855 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 84: 86.5.163.20.8647 > 10.6.0.1.domain: 64149+ PTR? 13.91.7.199.in-addr.arpa. (42)\
10:54:25.895069 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 48899, length 60\
10:54:26.896673 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 49155, length 60\
10:54:27.897081 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 49411, length 60\
10:54:28.898080 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.1 tell 86.5.163.20, length 28\
10:54:28.904480 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype ARP (0x0806), length 60: Reply 86.5.163.1 is-at 00:21:55:cb:93:da (oui Unknown), length 46\
10:54:28.904489 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 49667, length 60\
10:54:29.232433 0c:c4:7a:07:d3:4c (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 590: 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 0c:c4:7a:07:d3:4c (oui Unknown), length 548\
10:54:32.322647 0c:c4:7a:07:d3:4c (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 590: 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 0c:c4:7a:07:d3:4c (oui Unknown), length 548\
10:54:34.087494 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 342: 86.5.163.20.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:54:35.093240 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 342: 86.5.163.20.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:54:35.412984 0c:c4:7a:07:d3:4c (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 590: 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 0c:c4:7a:07:d3:4c (oui Unknown), length 548\
10:54:37.147264 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 342: 86.5.163.20.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:54:37.186480 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 358: 10.27.136.1.bootps > 86.5.163.20.bootpc: BOOTP/DHCP, Reply, length 316\
10:54:37.200013 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.20 tell 86.5.163.20, length 28\
10:54:38.209533 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.1 tell 86.5.163.20, length 28\
10:54:38.215685 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype ARP (0x0806), length 60: Reply 86.5.163.1 is-at 00:21:55:cb:93:da (oui Unknown), length 46\
10:54:38.215702 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 51971, length 60\
10:54:38.305335 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 70: 86.5.163.20.16065 > 192.33.4.12.domain: 48610% [1au] NS? . (28)\
10:54:38.325506 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 955: 192.33.4.12.domain > 86.5.163.20.16065: 48610*- 14/0/25 NS m.root-servers.net., NS a.root-servers.net., NS e.root-servers.net., NS f.root-servers.net., NS h.root-servers.net., NS l.root-servers.net., NS c.root-servers.net., NS j.root-servers.net., NS g.root-servers.net., NS b.root-servers.net., NS i.root-servers.net., NS k.root-servers.net., NS d.root-servers.net., RRSIG (913)\
10:54:38.325974 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 70: 86.5.163.20.14029 > 128.63.2.53.domain: 49826% [1au] DNSKEY? . (28)\
10:54:38.419966 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 778: 128.63.2.53.domain > 86.5.163.20.14029: 49826*- 3/0/1 DNSKEY, DNSKEY, RRSIG (736)\
10:54:38.618358 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 84: 86.5.163.20.26250 > 10.6.0.1.domain: 43443+ PTR? 12.4.33.192.in-addr.arpa. (42)\
10:54:39.271518 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 52227, length 60\
10:54:40.296688 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 52483, length 60\
10:54:41.331078 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 52739, length 60\
10:54:42.345078 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.1 tell 86.5.163.20, length 28\
10:54:42.352900 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype ARP (0x0806), length 60: Reply 86.5.163.1 is-at 00:21:55:cb:93:da (oui Unknown), length 46\
10:54:42.352909 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 52995, length 60\
10:54:47.209071 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 342: 86.5.163.20.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:54:47.508734 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 342: 86.5.163.20.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:54:51.682477 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 342: 86.5.163.20.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:54:51.724021 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 358: 10.27.136.1.bootps > 86.5.163.20.bootpc: BOOTP/DHCP, Reply, length 316\
10:54:51.737032 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.20 tell 86.5.163.20, length 28\
10:54:52.773536 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.1 tell 86.5.163.20, length 28\
10:54:52.780237 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype ARP (0x0806), length 60: Reply 86.5.163.1 is-at 00:21:55:cb:93:da (oui Unknown), length 46\
10:54:52.780255 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 55555, length 60\
10:54:52.866051 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 70: 86.5.163.20.40876 > 128.63.2.53.domain: 42576% [1au] NS? . (28)\
10:54:52.959730 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 955: 128.63.2.53.domain > 86.5.163.20.40876: 42576*- 14/0/25 NS a.root-servers.net., NS b.root-servers.net., NS c.root-servers.net., NS d.root-servers.net., NS e.root-servers.net., NS f.root-servers.net., NS g.root-servers.net., NS h.root-servers.net., NS i.root-servers.net., NS j.root-servers.net., NS k.root-servers.net., NS l.root-servers.net., NS m.root-servers.net., RRSIG (913)\
10:54:52.960371 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 70: 86.5.163.20.52067 > 192.5.5.241.domain: 24293% [1au] DNSKEY? . (28)\
10:54:52.979001 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 778: 192.5.5.241.domain > 86.5.163.20.52067: 24293*- 3/0/1 DNSKEY, DNSKEY, RRSIG (736)\
10:54:53.126863 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 84: 86.5.163.20.63969 > 10.6.0.1.domain: 20882+ PTR? 241.5.5.192.in-addr.arpa. (42)\
10:54:53.835519 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 55811, length 60\
10:54:54.897520 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 56067, length 60\
10:54:54.972477 0c:c4:7a:07:d3:4c (oui Unknown) > 33:33:00:01:00:02 (oui Unknown), ethertype IPv6 (0x86dd), length 98: fe80::ec4:7aff:fe07:d34c.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 inf-req\
10:54:55.908083 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 56323, length 60\
10:54:56.909075 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.1 tell 86.5.163.20, length 28\
10:54:56.916953 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype ARP (0x0806), length 60: Reply 86.5.163.1 is-at 00:21:55:cb:93:da (oui Unknown), length 46\
10:54:56.916962 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 56579, length 60\
10:55:01.652612 0c:c4:7a:07:d3:4c (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 590: 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 0c:c4:7a:07:d3:4c (oui Unknown), length 548\
10:55:01.840345 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 342: 86.5.163.20.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:55:01.948237 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 342: 86.5.163.20.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:55:04.742625 0c:c4:7a:07:d3:4c (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 590: 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 0c:c4:7a:07:d3:4c (oui Unknown), length 548\
10:55:05.984245 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 342: 86.5.163.20.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:22:68:1f:74:81 (oui Unknown), length 300\
10:55:06.022854 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 358: 10.27.136.1.bootps > 86.5.163.20.bootpc: BOOTP/DHCP, Reply, length 316\
10:55:06.036054 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.20 tell 86.5.163.20, length 28\
10:55:06.984083 00:22:68:1f:74:81 (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 42: Request who-has 86.5.163.1 tell 86.5.163.20, length 28\
10:55:06.990445 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype ARP (0x0806), length 60: Reply 86.5.163.1 is-at 00:21:55:cb:93:da (oui Unknown), length 46\
10:55:06.990457 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 59139, length 60\
10:55:07.102458 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 70: 86.5.163.20.58188 > 199.7.83.42.domain: 7978% [1au] NS? . (28)\
10:55:07.125399 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 955: 199.7.83.42.domain > 86.5.163.20.58188: 7978*- 14/0/25 NS a.root-servers.net., NS b.root-servers.net., NS c.root-servers.net., NS d.root-servers.net., NS e.root-servers.net., NS f.root-servers.net., NS g.root-servers.net., NS h.root-servers.net., NS i.root-servers.net., NS j.root-servers.net., NS k.root-servers.net., NS l.root-servers.net., NS m.root-servers.net., RRSIG (913)\
10:55:07.125964 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 70: 86.5.163.20.24946 > 199.7.83.42.domain: 49091% [1au] DNSKEY? . (28)\
10:55:07.148634 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 778: 199.7.83.42.domain > 86.5.163.20.24946: 49091*- 3/0/1 DNSKEY, DNSKEY, RRSIG (736)\
10:55:07.984076 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 59395, length 60\
10:55:08.984082 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 59651, length 60\
10:55:09.984414 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 59907, length 60\
10:55:11.022775 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 60163, length 60\
10:55:12.084530 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 60419, length 60\
10:55:13.145076 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 60675, length 60\
10:55:14.207515 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 60931, length 60\
10:55:15.226327 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 61187, length 60\
10:55:16.230240 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 61443, length 60\
10:55:17.292500 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 61699, length 60\
10:55:18.293059 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 61955, length 60\
10:55:19.293496 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 62211, length 60\
10:55:20.295718 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 62467, length 60\
10:55:21.351634 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 62723, length 60\
10:55:22.413512 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 62979, length 60\
10:55:23.475509 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 63235, length 60\
10:55:24.537513 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 63491, length 60\
10:55:25.544002 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 63747, length 60\
10:55:26.106484 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 70: 86.5.163.20.16425 > a.root-servers.net.domain: 23585% [1au] NS? . (28)\
10:55:26.137378 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 955: a.root-servers.net.domain > 86.5.163.20.16425: 23585*- 14/0/25 NS a.root-servers.net., NS b.root-servers.net., NS c.root-servers.net., NS d.root-servers.net., NS e.root-servers.net., NS f.root-servers.net., NS g.root-servers.net., NS h.root-servers.net., NS i.root-servers.net., NS j.root-servers.net., NS k.root-servers.net., NS l.root-servers.net., NS m.root-servers.net., RRSIG (913)\
10:55:26.412333 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 83: 86.5.163.20.42748 > 10.6.0.1.domain: 65077+ PTR? 4.0.41.198.in-addr.arpa. (41)\
10:55:26.606516 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 64003, length 60\
10:55:27.668507 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 64259, length 60\
10:55:27.892905 0c:c4:7a:07:d3:4c (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 590: 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 0c:c4:7a:07:d3:4c (oui Unknown), length 548\
10:55:28.709068 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 64515, length 60\
10:55:29.711533 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 64771, length 60\
10:55:30.713178 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 65027, length 60\
10:55:30.982770 0c:c4:7a:07:d3:4c (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 590: 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 0c:c4:7a:07:d3:4c (oui Unknown), length 548\
10:55:31.475156 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 83: 86.5.163.20.44796 > 208.67.222.222.domain: 65077+ PTR? 4.0.41.198.in-addr.arpa. (41)\
10:55:31.495504 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 115: 208.67.222.222.domain > 86.5.163.20.44796: 65077 1/0/0 PTR a.root-servers.net. (73)\
10:55:31.713176 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 65283, length 60\
10:55:32.775509 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 4, length 60\
10:55:33.837509 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 260, length 60\
10:55:34.072969 0c:c4:7a:07:d3:4c (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 590: 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 0c:c4:7a:07:d3:4c (oui Unknown), length 548\
10:55:34.899509 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 516, length 60\
10:55:35.922444 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 772, length 60\
10:55:36.922440 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 1028, length 60\
10:55:37.960272 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 1284, length 60\
10:55:39.010335 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 1540, length 60\
10:55:40.072519 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 1796, length 60\
10:55:40.936545 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 82: 86.5.163.20.56601 > 10.6.0.1.domain: 10077+ A? 0.pfsense.pool.ntp.org. (40)\
10:55:41.105518 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 2052, length 60\
10:55:42.167500 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 2308, length 60\
10:55:43.229516 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 2564, length 60\
10:55:44.230233 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 2820, length 60\
10:55:45.250323 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 3076, length 60\
10:55:46.036645 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 82: 86.5.163.20.39144 > 208.67.222.222.domain: 10077+ A? 0.pfsense.pool.ntp.org. (40)\
10:55:46.074178 00:21:55:cb:93:da (oui Unknown) > 00:22:68:1f:74:81 (oui Unknown), ethertype IPv4 (0x0800), length 146: 208.67.222.222.domain > 86.5.163.20.39144: 10077 4/0/0 A 5.83.190.253, A 213.199.225.30, A 77.66.33.146, A 87.106.176.225 (104)\
10:55:46.074309 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 82: 86.5.163.20.44752 > 10.6.0.1.domain: 55072+ AAAA? 0.pfsense.pool.ntp.org. (40)\
10:55:46.293444 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 3332, length 60\
10:55:47.355518 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 3588, length 60\
10:55:48.417516 00:22:68:1f:74:81 (oui Unknown) > 00:21:55:cb:93:da (oui Unknown), ethertype IPv4 (0x0800), length 94: 86.5.163.20 > 10.4.0.1: ICMP echo request, id 130, seq 3844, length 60\
^C\
151 packets captured\
151 packets received by filter\
0 packets dropped by kernel\
[2.2-RELEASE][admin@pfsense.irj972.local.lan]/root:}
                    1 Reply Last reply Reply Quote 0
                    • X
                      xtofh
                      last edited by

                      Hi, update from this side of the water  ;D

                      Today (after 3 days without a problem) it occured again.

                      netstat-nr output attached, as well as the sysctl dev.em.1. I didn't reboot yet, but I switched to a different fw with 2.1.5. (still have the 2.2 around but can't continue losing connection at random times) Other logs are still available, I have not rebooted the 2.2 firewall yet.

                      I also think it has something to do with the dhcp discovery not working correct. (or different from 2.1.5)

                      My setup is also: cable modem <-> pfsense. (but in Belgium, provider: Telenet)

                      Any advice as to what a logical next step would be?

                      netstat-nr.txt
                      sysctl-dev-em1.txt

                      1 Reply Last reply Reply Quote 0
                      • Q
                        q54e3w
                        last edited by

                        Good point, thanks for reminding me. During my most recent issue I tried plugging my modem into a working and previously in service 2.1.5 box on identical hardware (supermicro a1srm-2758f) which also failed to obtain a WAN IP address. I didn't test this as extensively as my 2.2 as time was pushing on by then.

                        1 Reply Last reply Reply Quote 0
                        • X
                          xtofh
                          last edited by

                          @irj972:

                          Good point, thanks for reminding me. During my most recent issue I tried plugging my modem into a working and previously in service 2.1.5 box on identical hardware (supermicro a1srm-2758f) which also failed to obtain a WAN IP address. I didn't test this as extensively as my 2.2 as time was pushing on by then.

                          Hm, strange. On my end, as soon as I switch my WAN cable to the 2.1.5 box, that 2.1.5 box gets an IP immediately.

                          1 Reply Last reply Reply Quote 0
                          • Q
                            q54e3w
                            last edited by

                            Next time it drops I'll try again to verify, possibly my fiddling influenced something?
                            If I purchase gold, would this get further attention? I need this system reliable for some upcoming work where I'll need to be able to vpn back in to my home office.

                            1 Reply Last reply Reply Quote 0
                            • X
                              xtofh
                              last edited by

                              I checked the 2.2 now, after leaving it unplugged from WAN for a night. Plugged in the WAN but it still didn't get an IP.

                              The only thing I see is dhcp requests, the 2.1.5 on that same network (we get multiple IPs from the isp via dhcp) works without a problem.

                              On the 2.2 this was the tcpdump on the WAN interface:

                              08:36:46.129955 IP 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:0d:88:cc:fa:2e, length 300
08:36:48.519874 IP 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:0d:88:cc:fa:2e, length 300
08:36:52.380571 IP 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:0d:88:cc:fa:2e, length 300
...

                              After a reboot, it got an IP just fine.. I'm seeing the same behavior on another firewall, remote this one, so we're holding off updating to 2.2 for now.  :-\

                              Kristof.

                              1 Reply Last reply Reply Quote 0
                              • DerelictD
                                Derelict LAYER 8 Netgate
                                last edited by

                                Packet capture on a mirror port upstream of WAN.  Identify the difference between the DHCP requests before and after reboot.  Submit findings as a bug report.

                                Chattanooga, Tennessee, USA
                                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                1 Reply Last reply Reply Quote 0
                                • X
                                  xtofh
                                  last edited by

                                  Is packet capture on the firewall itself ok also? (I don't have a very intelligent switch on that end)

                                  Kristof

                                  1 Reply Last reply Reply Quote 0
                                  • DerelictD
                                    Derelict LAYER 8 Netgate
                                    last edited by

                                    I would say, considering what you're asserting, no.  Capturing on the interface is not okay.

                                    Just because a packet capture on WAN captures something doesn't mean it was actually sent on the wire.

                                    Eliminate all doubt and capture on the switch.  Then you KNOW.

                                    Chattanooga, Tennessee, USA
                                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                    1 Reply Last reply Reply Quote 0
                                    • stephenw10S
                                      stephenw10 Netgate Administrator
                                      last edited by

                                      Though capturing on the WAN interface and comparing with 2.1.5 will tell you something. If they're identical then try and capture upstream to see if they're different at that point. That tells you where the change is occurring.

                                      Steve

                                      1 Reply Last reply Reply Quote 0
                                      • Q
                                        q54e3w
                                        last edited by

                                        so following my latest WAN drop, I did a bit more investigating. I believe I have found a way to force the WAN dropping issue. I don't have a switch to capture on unfortunately, my system is simple , i.e broadband modem -> pfsense 2.2.

                                        this is what Ive discovered,

                                        If I power my modem up, let it sync with the Virgin media network and then connect my pfsense WAN interface I get a DHCP address immediately. I can then unplug either coaxial or cat5 WAN cables and pfsense still gets DHCP immediately.

                                        If I connect my WAN interface before I power up my modem, when it syncs I do not get a DHCP address but see the repeating pattern of DHCP hunting.I believe something like my broadband line dropping or virgin lease expiration forces this type of reset and hence pfSense does not see a DHCP address.

                                        I'd like to do a packet capture of my WAN interface in both modes, one showing immediate DHCP allocation and one showing the looping error so somebody with greater knowledge could review and and raise a bug if its appropriate.
                                        Is there a preferred format or command line to capture WAN interface data, I'd like to ensure I get everything thats needed.

                                        1 Reply Last reply Reply Quote 0
                                        • X
                                          xtofh
                                          last edited by

                                          I was away for a while but upon returning have updated our 2.2 to 2.2.1-RELEASE.

                                          This was 4 days ago and since then we've not seen any issues. (doesn't mean anything yet, but I'm hopeful) I've got tcpdump running to make sure I catch anything weird if it occurs. To be sure it's okay I think I need to give it 3-4 weeks.

                                          @irj972, I'm not sure what the requested tcpdump parameters are but I use these:```
                                          tcpdump -i em1 -nnvvXSs 1514

                                          1 Reply Last reply Reply Quote 0
                                          • T
                                            TieT
                                            last edited by

                                            I recently did a new full install (after /etc/ got corrupted due to bad power off) and I haven't had the WAN link loss issue.

                                            But as irj972 stated, when pfsense is booted before the modem is booted it fails to get a IP addresss, i've also noticed this.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.