Skip to content

Instantly share code, notes, and snippets.

@anddam
Created April 29, 2018 08:04
Show Gist options
  • Save anddam/cf276cebc64827a917797ca6b820431d to your computer and use it in GitHub Desktop.
Save anddam/cf276cebc64827a917797ca6b820431d to your computer and use it in GitHub Desktop.
Tcpdump of an AP directly connected Ethernet
$ sudo tcpdump -v -i enx00e04c534458
tcpdump: listening on enx00e04c534458, link-type EN10MB (Ethernet), capture size 262144 bytes
09:41:32.774123 ARP, Ethernet (len 6), IPv4 (len 4), Reply 192.168.1.16 is-at 00:e0:4c:53:44:58 (oui Unknown), length 28
09:41:32.779891 IP (tos 0xc0, ttl 1, id 0, offset 0, flags [DF], proto IGMP (2), length 40, options (RA))
192.168.1.16 > 224.0.0.22: igmp v3 report, 1 group record(s) [gaddr 224.0.0.251 to_ex, 0 source(s)]
09:41:32.779921 IP6 (hlim 1, next-header Options (0) payload length: 36) :: > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 1 group record(s) [gaddr ff02::1:ff56:2746 to_ex, 0 source(s)]
09:41:32.870634 IP (tos 0x0, ttl 255, id 56696, offset 0, flags [DF], proto UDP (17), length 186)
192.168.1.16.mdns > 224.0.0.251.mdns: 0 [10q] PTR (QM)? _ipps._tcp.local. PTR (QM)? _nmea-0183._tcp.local. PTR (QM)? _ftp._tcp.local. PTR (QM)? _webdav._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _ipp._tcp.local. (158)
09:41:33.023011 IP (tos 0x0, ttl 255, id 56729, offset 0, flags [DF], proto UDP (17), length 122)
192.168.1.16.mdns > 224.0.0.251.mdns: 0 [2q] [2n] ANY (QM)? 16.1.168.192.in-addr.arpa. ANY (QM)? bimentary.local. (94)
09:41:33.067894 IP (tos 0xc0, ttl 1, id 0, offset 0, flags [DF], proto IGMP (2), length 40, options (RA))
192.168.1.16 > 224.0.0.22: igmp v3 report, 1 group record(s) [gaddr 224.0.0.251 to_ex, 0 source(s)]
09:41:33.272734 IP (tos 0x0, ttl 255, id 56751, offset 0, flags [DF], proto UDP (17), length 122)
192.168.1.16.mdns > 224.0.0.251.mdns: 0 [2q] [2n] ANY (QM)? 16.1.168.192.in-addr.arpa. ANY (QM)? bimentary.local. (94)
09:41:33.451972 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) :: > ff02::1:ff56:2746: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::7c7e:caca:9156:2746
unknown option (14), length 8 (1):
0x0000: 6076 0f2e 2624
09:41:33.523310 IP (tos 0x0, ttl 255, id 56801, offset 0, flags [DF], proto UDP (17), length 122)
192.168.1.16.mdns > 224.0.0.251.mdns: 0 [2q] [2n] ANY (QM)? 16.1.168.192.in-addr.arpa. ANY (QM)? bimentary.local. (94)
09:41:33.579926 IP6 (hlim 1, next-header Options (0) payload length: 36) :: > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 1 group record(s) [gaddr ff02::1:ff56:2746 to_ex, 0 source(s)]
09:41:33.723988 IP (tos 0x0, ttl 255, id 56804, offset 0, flags [DF], proto UDP (17), length 110)
192.168.1.16.mdns > 224.0.0.251.mdns: 0*- [0q] 2/0/0 16.1.168.192.in-addr.arpa. (Cache flush) PTR bimentary.local., bimentary.local. (Cache flush) A 192.168.1.16 (82)
09:41:33.871965 IP (tos 0x0, ttl 255, id 56807, offset 0, flags [DF], proto UDP (17), length 186)
192.168.1.16.mdns > 224.0.0.251.mdns: 0 [10q] PTR (QM)? _ipps._tcp.local. PTR (QM)? _nmea-0183._tcp.local. PTR (QM)? _ftp._tcp.local. PTR (QM)? _webdav._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _ipp._tcp.local. (158)
09:41:34.016385 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.1, length 46
09:41:34.318894 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.1, length 46
09:41:34.476145 IP6 (hlim 1, next-header Options (0) payload length: 36) fe80::7c7e:caca:9156:2746 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 1 group record(s) [gaddr ff02::1:ff56:2746 to_ex, 0 source(s)]
09:41:34.487926 IP6 (hlim 1, next-header Options (0) payload length: 36) fe80::7c7e:caca:9156:2746 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 1 group record(s) [gaddr ff02::fb to_ex, 0 source(s)]
09:41:34.576996 IP6 (flowlabel 0x7a6e0, hlim 255, next-header UDP (17) payload length: 166) fe80::7c7e:caca:9156:2746.mdns > ff02::fb.mdns: [udp sum ok] 0 [10q] PTR (QM)? _ipps._tcp.local. PTR (QM)? _nmea-0183._tcp.local. PTR (QM)? _ftp._tcp.local. PTR (QM)? _webdav._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _ipp._tcp.local. (158)
09:41:34.621558 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.1, length 46
09:41:34.728757 IP6 (flowlabel 0x7a6e0, hlim 255, next-header UDP (17) payload length: 161) fe80::7c7e:caca:9156:2746.mdns > ff02::fb.mdns: [udp sum ok] 0 [2q] [2n] ANY (QM)? 6.4.7.2.6.5.1.9.a.c.a.c.e.7.c.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. ANY (QM)? bimentary.local. (153)
09:41:34.728976 IP (tos 0x0, ttl 255, id 56915, offset 0, flags [DF], proto UDP (17), length 181)
192.168.1.16.mdns > 224.0.0.251.mdns: 0 [2q] [2n] ANY (QM)? 6.4.7.2.6.5.1.9.a.c.a.c.e.7.c.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. ANY (QM)? bimentary.local. (153)
09:41:34.729457 IP (tos 0x0, ttl 255, id 56916, offset 0, flags [DF], proto UDP (17), length 71)
192.168.1.16.mdns > 224.0.0.251.mdns: 0*- [0q] 1/0/0 bimentary.local. (Cache flush) A 192.168.1.16 (43)
09:41:34.806739 IP6 (flowlabel 0x0247b, hlim 255, next-header ICMPv6 (58) payload length: 8) fe80::7c7e:caca:9156:2746 > ip6-allrouters: [icmp6 sum ok] ICMP6, router solicitation, length 8
09:41:34.807859 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.16 (Broadcast) tell 192.168.1.16, length 28
09:41:34.859936 IP6 (hlim 1, next-header Options (0) payload length: 36) fe80::7c7e:caca:9156:2746 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 1 group record(s) [gaddr ff02::fb to_ex, 0 source(s)]
09:41:34.925027 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.1, length 46
09:41:34.925563 IP (tos 0x0, ttl 255, id 56952, offset 0, flags [DF], proto UDP (17), length 94)
192.168.1.16.mdns > 224.0.0.251.mdns: 0*- [0q] 1/0/0 16.1.168.192.in-addr.arpa. (Cache flush) PTR bimentary.local. (66)
09:41:34.979421 IP6 (flowlabel 0x7a6e0, hlim 255, next-header UDP (17) payload length: 161) fe80::7c7e:caca:9156:2746.mdns > ff02::fb.mdns: [udp sum ok] 0 [2q] [2n] ANY (QM)? 6.4.7.2.6.5.1.9.a.c.a.c.e.7.c.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. ANY (QM)? bimentary.local. (153)
09:41:34.979663 IP (tos 0x0, ttl 255, id 56965, offset 0, flags [DF], proto UDP (17), length 181)
192.168.1.16.mdns > 224.0.0.251.mdns: 0 [2q] [2n] ANY (QM)? 6.4.7.2.6.5.1.9.a.c.a.c.e.7.c.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. ANY (QM)? bimentary.local. (153)
09:41:35.051925 IP6 (hlim 1, next-header Options (0) payload length: 56) fe80::7c7e:caca:9156:2746 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 2 group record(s) [gaddr ff02::fb to_ex, 0 source(s)] [gaddr ff02::1:ff56:2746 to_ex, 0 source(s)]
09:41:35.227776 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.1, length 46
09:41:35.230493 IP6 (flowlabel 0x7a6e0, hlim 255, next-header UDP (17) payload length: 161) fe80::7c7e:caca:9156:2746.mdns > ff02::fb.mdns: [udp sum ok] 0 [2q] [2n] ANY (QM)? 6.4.7.2.6.5.1.9.a.c.a.c.e.7.c.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. ANY (QM)? bimentary.local. (153)
09:41:35.230712 IP (tos 0x0, ttl 255, id 56989, offset 0, flags [DF], proto UDP (17), length 181)
192.168.1.16.mdns > 224.0.0.251.mdns: 0 [2q] [2n] ANY (QM)? 6.4.7.2.6.5.1.9.a.c.a.c.e.7.c.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. ANY (QM)? bimentary.local. (153)
09:41:35.231175 IP (tos 0x0, ttl 255, id 56990, offset 0, flags [DF], proto UDP (17), length 71)
192.168.1.16.mdns > 224.0.0.251.mdns: 0*- [0q] 1/0/0 bimentary.local. (Cache flush) A 192.168.1.16 (43)
09:41:35.430658 IP (tos 0x0, ttl 255, id 57032, offset 0, flags [DF], proto UDP (17), length 169)
192.168.1.16.mdns > 224.0.0.251.mdns: 0*- [0q] 2/0/0 6.4.7.2.6.5.1.9.a.c.a.c.e.7.c.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (Cache flush) PTR bimentary.local., bimentary.local. (Cache flush) AAAA fe80::7c7e:caca:9156:2746 (141)
09:41:35.431012 IP6 (flowlabel 0x7a6e0, hlim 255, next-header UDP (17) payload length: 149) fe80::7c7e:caca:9156:2746.mdns > ff02::fb.mdns: [udp sum ok] 0*- [0q] 2/0/0 6.4.7.2.6.5.1.9.a.c.a.c.e.7.c.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (Cache flush) PTR bimentary.local., bimentary.local. (Cache flush) AAAA fe80::7c7e:caca:9156:2746 (141)
09:41:35.530803 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.1, length 46
09:41:35.578509 IP6 (flowlabel 0x7a6e0, hlim 255, next-header UDP (17) payload length: 166) fe80::7c7e:caca:9156:2746.mdns > ff02::fb.mdns: [udp sum ok] 0 [10q] PTR (QM)? _ipps._tcp.local. PTR (QM)? _nmea-0183._tcp.local. PTR (QM)? _ftp._tcp.local. PTR (QM)? _webdav._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _ipp._tcp.local. (158)
09:41:35.833398 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.1, length 46
09:41:35.873051 IP (tos 0x0, ttl 255, id 57103, offset 0, flags [DF], proto UDP (17), length 186)
192.168.1.16.mdns > 224.0.0.251.mdns: 0 [10q] PTR (QM)? _ipps._tcp.local. PTR (QM)? _nmea-0183._tcp.local. PTR (QM)? _ftp._tcp.local. PTR (QM)? _webdav._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _ipp._tcp.local. (158)
09:41:36.633294 IP (tos 0x0, ttl 255, id 57278, offset 0, flags [DF], proto UDP (17), length 169)
192.168.1.16.mdns > 224.0.0.251.mdns: 0*- [0q] 2/0/0 6.4.7.2.6.5.1.9.a.c.a.c.e.7.c.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (Cache flush) PTR bimentary.local., bimentary.local. (Cache flush) AAAA fe80::7c7e:caca:9156:2746 (141)
09:41:36.633516 IP6 (flowlabel 0x7a6e0, hlim 255, next-header UDP (17) payload length: 149) fe80::7c7e:caca:9156:2746.mdns > ff02::fb.mdns: [udp sum ok] 0*- [0q] 2/0/0 6.4.7.2.6.5.1.9.a.c.a.c.e.7.c.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (Cache flush) PTR bimentary.local., bimentary.local. (Cache flush) AAAA fe80::7c7e:caca:9156:2746 (141)
09:41:37.127951 IP (tos 0x0, ttl 255, id 57356, offset 0, flags [DF], proto UDP (17), length 110)
192.168.1.16.mdns > 224.0.0.251.mdns: 0*- [0q] 2/0/0 16.1.168.192.in-addr.arpa. (Cache flush) PTR bimentary.local., bimentary.local. (Cache flush) A 192.168.1.16 (82)
09:41:37.579616 IP6 (flowlabel 0x7a6e0, hlim 255, next-header UDP (17) payload length: 166) fe80::7c7e:caca:9156:2746.mdns > ff02::fb.mdns: [udp sum ok] 0 [10q] PTR (QM)? _ipps._tcp.local. PTR (QM)? _nmea-0183._tcp.local. PTR (QM)? _ftp._tcp.local. PTR (QM)? _webdav._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _ipp._tcp.local. (158)
09:41:38.836150 IP (tos 0x0, ttl 255, id 57551, offset 0, flags [DF], proto UDP (17), length 169)
192.168.1.16.mdns > 224.0.0.251.mdns: 0*- [0q] 2/0/0 6.4.7.2.6.5.1.9.a.c.a.c.e.7.c.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (Cache flush) PTR bimentary.local., bimentary.local. (Cache flush) AAAA fe80::7c7e:caca:9156:2746 (141)
09:41:38.836389 IP6 (flowlabel 0x7a6e0, hlim 255, next-header UDP (17) payload length: 149) fe80::7c7e:caca:9156:2746.mdns > ff02::fb.mdns: [udp sum ok] 0*- [0q] 2/0/0 6.4.7.2.6.5.1.9.a.c.a.c.e.7.c.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (Cache flush) PTR bimentary.local., bimentary.local. (Cache flush) AAAA fe80::7c7e:caca:9156:2746 (141)
09:41:39.873876 IP (tos 0x0, ttl 255, id 57710, offset 0, flags [DF], proto UDP (17), length 186)
192.168.1.16.mdns > 224.0.0.251.mdns: 0 [10q] PTR (QM)? _ipps._tcp.local. PTR (QM)? _nmea-0183._tcp.local. PTR (QM)? _ftp._tcp.local. PTR (QM)? _webdav._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _ipp._tcp.local. (158)
09:41:41.582042 IP6 (flowlabel 0x7a6e0, hlim 255, next-header UDP (17) payload length: 166) fe80::7c7e:caca:9156:2746.mdns > ff02::fb.mdns: [udp sum ok] 0 [10q] PTR (QM)? _ipps._tcp.local. PTR (QM)? _nmea-0183._tcp.local. PTR (QM)? _ftp._tcp.local. PTR (QM)? _webdav._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _ipp._tcp.local. (158)
09:41:47.878066 IP (tos 0x0, ttl 255, id 59569, offset 0, flags [DF], proto UDP (17), length 186)
192.168.1.16.mdns > 224.0.0.251.mdns: 0 [10q] PTR (QM)? _ipps._tcp.local. PTR (QM)? _nmea-0183._tcp.local. PTR (QM)? _ftp._tcp.local. PTR (QM)? _webdav._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _ipp._tcp.local. (158)
09:41:49.584160 IP6 (flowlabel 0x7a6e0, hlim 255, next-header UDP (17) payload length: 166) fe80::7c7e:caca:9156:2746.mdns > ff02::fb.mdns: [udp sum ok] 0 [10q] PTR (QM)? _ipps._tcp.local. PTR (QM)? _nmea-0183._tcp.local. PTR (QM)? _ftp._tcp.local. PTR (QM)? _webdav._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _ipp._tcp.local. (158)
09:41:57.352360 IP (tos 0x0, ttl 64, id 15479, offset 0, flags [DF], proto UDP (17), length 248)
192.168.1.16.17500 > 192.168.1.255.17500: UDP, length 220
09:42:03.892924 IP (tos 0x0, ttl 255, id 63404, offset 0, flags [DF], proto UDP (17), length 186)
192.168.1.16.mdns > 224.0.0.251.mdns: 0 [10q] PTR (QM)? _ipps._tcp.local. PTR (QM)? _nmea-0183._tcp.local. PTR (QM)? _ftp._tcp.local. PTR (QM)? _webdav._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _ipp._tcp.local. (158)
09:42:05.586716 IP6 (flowlabel 0x7a6e0, hlim 255, next-header UDP (17) payload length: 166) fe80::7c7e:caca:9156:2746.mdns > ff02::fb.mdns: [udp sum ok] 0 [10q] PTR (QM)? _ipps._tcp.local. PTR (QM)? _nmea-0183._tcp.local. PTR (QM)? _ftp._tcp.local. PTR (QM)? _webdav._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _ipp._tcp.local. (158)
09:42:21.040109 IP6 (hlim 1, next-header Options (0) payload length: 56) fe80::7c7e:caca:9156:2746 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 2 group record(s) [gaddr ff02::fb to_ex, 0 source(s)] [gaddr ff02::1:ff56:2746 to_ex, 0 source(s)]
09:42:21.871898 IP6 (hlim 1, next-header Options (0) payload length: 56) fe80::7c7e:caca:9156:2746 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 2 group record(s) [gaddr ff02::fb to_ex, 0 source(s)] [gaddr ff02::1:ff56:2746 to_ex, 0 source(s)]
09:42:27.362643 IP (tos 0x0, ttl 64, id 21224, offset 0, flags [DF], proto UDP (17), length 248)
192.168.1.16.17500 > 192.168.1.255.17500: UDP, length 220
09:42:27.600389 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 1029)
192.168.1.1.59754 > 192.168.1.255.4919: UDP, length 1001
09:42:35.908853 IP (tos 0x0, ttl 255, id 63803, offset 0, flags [DF], proto UDP (17), length 186)
192.168.1.16.mdns > 224.0.0.251.mdns: 0 [10q] PTR (QM)? _ipps._tcp.local. PTR (QM)? _nmea-0183._tcp.local. PTR (QM)? _ftp._tcp.local. PTR (QM)? _webdav._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _ipp._tcp.local. (158)
09:42:37.589007 IP6 (flowlabel 0x7a6e0, hlim 255, next-header UDP (17) payload length: 166) fe80::7c7e:caca:9156:2746.mdns > ff02::fb.mdns: [udp sum ok] 0 [10q] PTR (QM)? _ipps._tcp.local. PTR (QM)? _nmea-0183._tcp.local. PTR (QM)? _ftp._tcp.local. PTR (QM)? _webdav._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _ipp._tcp.local. (158)
09:42:57.373443 IP (tos 0x0, ttl 64, id 24217, offset 0, flags [DF], proto UDP (17), length 248)
192.168.1.16.17500 > 192.168.1.255.17500: UDP, length 220
09:43:10.391014 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:11.403908 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:12.427939 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:13.452029 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:14.475959 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:15.499899 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:16.524117 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:17.547986 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:18.571939 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:19.596047 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:20.619963 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:21.643931 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:22.667926 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:23.691943 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:24.715900 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:25.813922 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:26.827905 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:27.386576 IP (tos 0x0, ttl 64, id 27725, offset 0, flags [DF], proto UDP (17), length 248)
192.168.1.16.17500 > 192.168.1.255.17500: UDP, length 220
09:43:27.851949 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:28.876081 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:29.899909 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:30.923963 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:31.948134 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:32.971992 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:33.995900 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.16, length 28
09:43:39.909395 IP (tos 0x0, ttl 255, id 4146, offset 0, flags [DF], proto UDP (17), length 186)
192.168.1.16.mdns > 224.0.0.251.mdns: 0 [10q] PTR (QM)? _ipps._tcp.local. PTR (QM)? _nmea-0183._tcp.local. PTR (QM)? _ftp._tcp.local. PTR (QM)? _webdav._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _ipp._tcp.local. (158)
09:43:41.590632 IP6 (flowlabel 0x7a6e0, hlim 255, next-header UDP (17) payload length: 166) fe80::7c7e:caca:9156:2746.mdns > ff02::fb.mdns: [udp sum ok] 0 [10q] PTR (QM)? _ipps._tcp.local. PTR (QM)? _nmea-0183._tcp.local. PTR (QM)? _ftp._tcp.local. PTR (QM)? _webdav._tcp.local. PTR (QM)? _webdavs._tcp.local. PTR (QM)? _sftp-ssh._tcp.local. PTR (QM)? _smb._tcp.local. PTR (QM)? _afpovertcp._tcp.local. PTR (QM)? _nfs._tcp.local. PTR (QM)? _ipp._tcp.local. (158)
^C
86 packets captured
86 packets received by filter
0 packets dropped by kernel
$
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment