# tcpdump -v -c 250 tcpdump: listening on xl0, link-type EN10MB (Ethernet), capture size 96 bytes 09:23:00.356803 arp who-has desktop.home tell thinkpad.home 09:23:00.356882 arp reply desktop.home is-at 00:01:02:f6:03:03 09:23:00.358214 IP (tos 0x0, ttl 128, id 544, offset 0, flags [DF], length: 48) thinkpad.home.1050 > desktop.home.ssh: S [tcp sum ok] 3500772761:3500772761(0) win 60480 09:23:00.358297 IP (tos 0x0, ttl 64, id 10663, offset 0, flags [DF], length: 48) desktop.home.ssh > thinkpad.home.1050: S [tcp sum ok] 4128729477:4128729477(0) ack 3500772762 win 65535 09:23:00.359350 IP (tos 0x0, ttl 128, id 545, offset 0, flags [DF], length: 40) thinkpad.home.1050 > desktop.home.ssh: . [tcp sum ok] ack 1 win 60480 09:23:00.363907 IP (tos 0x0, ttl 64, id 10664, offset 0, flags [DF], length: 81) desktop.home.ssh > thinkpad.home.1050: P [tcp sum ok] 1:42(41) ack 1 win 65535 09:23:00.373819 IP (tos 0x0, ttl 128, id 546, offset 0, flags [DF], length: 68) thinkpad.home.1050 > desktop.home.ssh: P [tcp sum ok] 1:29(28) ack 42 win 60439 09:23:00.379234 IP (tos 0x0, ttl 64, id 10665, offset 0, flags [DF], length: 640) desktop.home.ssh > thinkpad.home.1050: P 42:642(600) ack 29 win 65535 09:23:00.381244 IP (tos 0x0, ttl 128, id 547, offset 0, flags [DF], length: 544) thinkpad.home.1050 > desktop.home.ssh: P 29:533(504) ack 642 win 59839 09:23:00.381359 IP (tos 0x0, ttl 128, id 548, offset 0, flags [DF], length: 56) thinkpad.home.1050 > desktop.home.ssh: P [tcp sum ok] 533:549(16) ack 642 win 59839 09:23:00.381406 IP (tos 0x0, ttl 64, id 10666, offset 0, flags [DF], length: 40) desktop.home.ssh > thinkpad.home.1050: . [tcp sum ok] ack 549 win 65535 09:23:00.400838 IP (tos 0x0, ttl 64, id 10667, offset 0, flags [DF], length: 320) desktop.home.ssh > thinkpad.home.1050: P 642:922(280) ack 549 win 65535 09:23:00.599661 IP (tos 0x0, ttl 128, id 549, offset 0, flags [DF], length: 40) thinkpad.home.1050 > desktop.home.ssh: . [tcp sum ok] ack 922 win 59559 09:23:00.755594 IP (tos 0x0, ttl 128, id 550, offset 0, flags [DF], length: 312) thinkpad.home.1050 > desktop.home.ssh: P 549:821(272) ack 922 win 59559 09:23:00.797587 IP (tos 0x0, ttl 64, id 10668, offset 0, flags [DF], length: 824) desktop.home.ssh > thinkpad.home.1050: P 922:1706(784) ack 821 win 65535 09:23:00.900137 IP (tos 0x0, ttl 128, id 551, offset 0, flags [DF], length: 40) thinkpad.home.1050 > desktop.home.ssh: . [tcp sum ok] ack 1706 win 60480 09:23:01.300141 IP (tos 0x0, ttl 128, id 552, offset 0, flags [DF], length: 56) thinkpad.home.1050 > desktop.home.ssh: P [tcp sum ok] 821:837(16) ack 1706 win 60480 09:23:01.301739 IP (tos 0x0, ttl 128, id 553, offset 0, flags [DF], length: 92) thinkpad.home.1050 > desktop.home.ssh: P 837:889(52) ack 1706 win 60480 09:23:01.301848 IP (tos 0x0, ttl 64, id 10669, offset 0, flags [DF], length: 40) desktop.home.ssh > thinkpad.home.1050: . [tcp sum ok] ack 889 win 65535 09:23:01.302361 IP (tos 0x0, ttl 64, id 10670, offset 0, flags [DF], length: 92) desktop.home.ssh > thinkpad.home.1050: P 1706:1758(52) ack 889 win 65535 09:23:01.501039 IP (tos 0x0, ttl 128, id 554, offset 0, flags [DF], length: 40) thinkpad.home.1050 > desktop.home.ssh: . [tcp sum ok] ack 1758 win 60428 09:23:02.759227 IP (tos 0x0, ttl 128, id 555, offset 0, flags [DF], length: 108) thinkpad.home.1050 > desktop.home.ssh: P 889:957(68) ack 1758 win 60428 09:23:02.760300 IP (tos 0x0, ttl 64, id 10671, offset 0, flags [none], length: 71) desktop.home.62376 > ns3.webspeed.dk.domain: [udp sum ok] 54960+ PTR? 11.1.168.192.in-addr.arpa. (43) 09:23:02.760672 IP (tos 0x0, ttl 64, id 10671, offset 0, flags [none], length: 72) ns3.webspeed.dk.domain > desktop.home.62376: [udp sum ok] 54960 NXDomain* 0/0/0 (44) 09:23:02.802551 IP (tos 0x0, ttl 64, id 10672, offset 0, flags [none], length: 72) desktop.home.54192 > ns3.webspeed.dk.domain: [udp sum ok] 27953+ PTR? 41.10.239.194.in-addr.arpa. (44) 09:23:02.813663 IP (tos 0x0, ttl 119, id 18328, offset 0, flags [none], length: 101) ns3.webspeed.dk.domain > desktop.home.54192: 27953 1/0/0 41.10.239.194.in-addr.arpa. (73) 09:23:02.851869 IP (tos 0x0, ttl 64, id 10673, offset 0, flags [DF], length: 40) desktop.home.ssh > thinkpad.home.1050: . [tcp sum ok] ack 957 win 65535 09:23:03.672567 IP (tos 0x0, ttl 64, id 10674, offset 0, flags [none], length: 72) desktop.home.49248 > ns3.webspeed.dk.domain: [udp sum ok] 4480+ PTR? 41.10.239.194.in-addr.arpa. (44) 09:23:03.685713 IP (tos 0x0, ttl 119, id 18841, offset 0, flags [none], length: 101) ns3.webspeed.dk.domain > desktop.home.49248: 4480 1/0/0 41.10.239.194.in-addr.arpa. (73) 09:23:07.762088 IP (tos 0x0, ttl 64, id 10675, offset 0, flags [none], length: 71) desktop.home.62240 > ns4.webspeed.dk.domain: [udp sum ok] 54960+ PTR? 11.1.168.192.in-addr.arpa. (43) 09:23:07.762523 IP (tos 0x0, ttl 64, id 10675, offset 0, flags [none], length: 72) ns4.webspeed.dk.domain > desktop.home.62240: [udp sum ok] 54960 NXDomain* 0/0/0 (44) 09:23:07.812380 IP (tos 0x0, ttl 64, id 10676, offset 0, flags [none], length: 72) desktop.home.62809 > ns3.webspeed.dk.domain: [udp sum ok] 27954+ PTR? 42.10.239.194.in-addr.arpa. (44) 09:23:07.826043 IP (tos 0x0, ttl 119, id 21008, offset 0, flags [none], length: 101) ns3.webspeed.dk.domain > desktop.home.62809: 27954 1/0/0 42.10.239.194.in-addr.arpa. (73) 09:23:08.592751 arp who-has desktop.home tell 192.168.1.1 09:23:08.592831 arp reply desktop.home is-at 00:01:02:f6:03:03 09:23:08.682396 IP (tos 0x0, ttl 64, id 10677, offset 0, flags [none], length: 72) desktop.home.53806 > ns3.webspeed.dk.domain: [udp sum ok] 4481+ PTR? 42.10.239.194.in-addr.arpa. (44) 09:23:08.693715 IP (tos 0x0, ttl 119, id 21529, offset 0, flags [none], length: 101) ns3.webspeed.dk.domain > desktop.home.53806: 4481 1/0/0 42.10.239.194.in-addr.arpa. (73) 09:23:08.694601 IP (tos 0x0, ttl 64, id 10678, offset 0, flags [none], length: 70) desktop.home.56964 > ns3.webspeed.dk.domain: [udp sum ok] 4482+ PTR? 1.1.168.192.in-addr.arpa. (42) 09:23:08.695005 IP (tos 0x0, ttl 64, id 10678, offset 0, flags [none], length: 96) ns3.webspeed.dk.domain > desktop.home.56964: 4482* 1/0/0 192.168.1.1.in-addr.arpa. PTR[|domain] 09:23:08.822508 IP (tos 0x0, ttl 64, id 10679, offset 0, flags [none], length: 70) desktop.home.58393 > ns3.webspeed.dk.domain: [udp sum ok] 27955+ PTR? 1.1.168.192.in-addr.arpa. (42) 09:23:08.822915 IP (tos 0x0, ttl 64, id 10679, offset 0, flags [none], length: 96) ns3.webspeed.dk.domain > desktop.home.58393: 27955* 1/0/0 192.168.1.1.in-addr.arpa. PTR[|domain] 09:23:12.772147 IP (tos 0x0, ttl 64, id 10680, offset 0, flags [none], length: 71) desktop.home.55847 > ns3.webspeed.dk.domain: [udp sum ok] 54960+ PTR? 11.1.168.192.in-addr.arpa. (43) 09:23:12.772548 IP (tos 0x0, ttl 64, id 10680, offset 0, flags [none], length: 72) ns3.webspeed.dk.domain > desktop.home.55847: [udp sum ok] 54960 NXDomain* 0/0/0 (44) 09:23:13.702155 IP (tos 0x0, ttl 64, id 10681, offset 0, flags [none], length: 70) desktop.home.65241 > ns4.webspeed.dk.domain: [udp sum ok] 4482+ PTR? 1.1.168.192.in-addr.arpa. (42) 09:23:13.702605 IP (tos 0x0, ttl 64, id 10681, offset 0, flags [none], length: 96) ns4.webspeed.dk.domain > desktop.home.65241: 4482* 1/0/0 192.168.1.1.in-addr.arpa. PTR[|domain] 09:23:13.832191 IP (tos 0x0, ttl 64, id 10682, offset 0, flags [none], length: 70) desktop.home.54773 > ns4.webspeed.dk.domain: [udp sum ok] 27955+ PTR? 1.1.168.192.in-addr.arpa. (42) 09:23:13.832669 IP (tos 0x0, ttl 64, id 10682, offset 0, flags [none], length: 96) ns4.webspeed.dk.domain > desktop.home.54773: 27955* 1/0/0 192.168.1.1.in-addr.arpa. PTR[|domain] 09:23:17.782243 IP (tos 0x0, ttl 64, id 10683, offset 0, flags [none], length: 71) desktop.home.63697 > ns4.webspeed.dk.domain: [udp sum ok] 54960+ PTR? 11.1.168.192.in-addr.arpa. (43) 09:23:17.782631 IP (tos 0x0, ttl 64, id 10683, offset 0, flags [none], length: 72) ns4.webspeed.dk.domain > desktop.home.63697: [udp sum ok] 54960 NXDomain* 0/0/0 (44) 09:23:18.712223 IP (tos 0x0, ttl 64, id 10684, offset 0, flags [none], length: 70) desktop.home.61847 > ns3.webspeed.dk.domain: [udp sum ok] 4482+ PTR? 1.1.168.192.in-addr.arpa. (42) 09:23:18.712683 IP (tos 0x0, ttl 64, id 10684, offset 0, flags [none], length: 96) ns3.webspeed.dk.domain > desktop.home.61847: 4482* 1/0/0 192.168.1.1.in-addr.arpa. PTR[|domain] 09:23:18.842224 IP (tos 0x0, ttl 64, id 10685, offset 0, flags [none], length: 70) desktop.home.61190 > ns3.webspeed.dk.domain: [udp sum ok] 27955+ PTR? 1.1.168.192.in-addr.arpa. (42) 09:23:18.842596 IP (tos 0x0, ttl 64, id 10685, offset 0, flags [none], length: 96) ns3.webspeed.dk.domain > desktop.home.61190: 27955* 1/0/0 192.168.1.1.in-addr.arpa. PTR[|domain] 09:23:22.792284 IP (tos 0x0, ttl 64, id 10686, offset 0, flags [none], length: 71) desktop.home.56456 > ns3.webspeed.dk.domain: [udp sum ok] 54960+ PTR? 11.1.168.192.in-addr.arpa. (43) 09:23:22.792676 IP (tos 0x0, ttl 64, id 10686, offset 0, flags [none], length: 72) ns3.webspeed.dk.domain > desktop.home.56456: [udp sum ok] 54960 NXDomain* 0/0/0 (44) 09:23:23.722309 IP (tos 0x0, ttl 64, id 10687, offset 0, flags [none], length: 70) desktop.home.52430 > ns4.webspeed.dk.domain: [udp sum ok] 4482+ PTR? 1.1.168.192.in-addr.arpa. (42) 09:23:23.722719 IP (tos 0x0, ttl 64, id 10687, offset 0, flags [none], length: 96) ns4.webspeed.dk.domain > desktop.home.52430: 4482* 1/0/0 192.168.1.1.in-addr.arpa. PTR[|domain] 09:23:23.852304 IP (tos 0x0, ttl 64, id 10688, offset 0, flags [none], length: 70) desktop.home.49647 > ns4.webspeed.dk.domain: [udp sum ok] 27955+ PTR? 1.1.168.192.in-addr.arpa. (42) 09:23:23.852762 IP (tos 0x0, ttl 64, id 10688, offset 0, flags [none], length: 96) ns4.webspeed.dk.domain > desktop.home.49647: 27955* 1/0/0 192.168.1.1.in-addr.arpa. PTR[|domain] 09:23:28.732415 IP (tos 0x0, ttl 64, id 10689, offset 0, flags [none], length: 70) desktop.home.51504 > ns3.webspeed.dk.domain: [udp sum ok] 4482+ PTR? 1.1.168.192.in-addr.arpa. (42) 09:23:28.732817 IP (tos 0x0, ttl 64, id 10689, offset 0, flags [none], length: 96) ns3.webspeed.dk.domain > desktop.home.51504: 4482* 1/0/0 192.168.1.1.in-addr.arpa. PTR[|domain] 09:23:28.862368 IP (tos 0x0, ttl 64, id 10690, offset 0, flags [none], length: 70) desktop.home.64082 > ns3.webspeed.dk.domain: [udp sum ok] 27955+ PTR? 1.1.168.192.in-addr.arpa. (42) 09:23:28.862748 IP (tos 0x0, ttl 64, id 10690, offset 0, flags [none], length: 96) ns3.webspeed.dk.domain > desktop.home.64082: 27955* 1/0/0 192.168.1.1.in-addr.arpa. PTR[|domain] 09:23:32.802434 IP (tos 0x0, ttl 64, id 10691, offset 0, flags [none], length: 71) desktop.home.65159 > ns4.webspeed.dk.domain: [udp sum ok] 54960+ PTR? 11.1.168.192.in-addr.arpa. (43) 09:23:32.802839 IP (tos 0x0, ttl 64, id 10691, offset 0, flags [none], length: 72) ns4.webspeed.dk.domain > desktop.home.65159: [udp sum ok] 54960 NXDomain* 0/0/0 (44) 09:23:38.742531 IP (tos 0x0, ttl 64, id 10692, offset 0, flags [none], length: 70) desktop.home.63106 > ns4.webspeed.dk.domain: [udp sum ok] 4482+ PTR? 1.1.168.192.in-addr.arpa. (42) 09:23:38.742947 IP (tos 0x0, ttl 64, id 10692, offset 0, flags [none], length: 96) ns4.webspeed.dk.domain > desktop.home.63106: 4482* 1/0/0 192.168.1.1.in-addr.arpa. PTR[|domain] 09:23:38.872531 IP (tos 0x0, ttl 64, id 10693, offset 0, flags [none], length: 70) desktop.home.60699 > ns4.webspeed.dk.domain: [udp sum ok] 27955+ PTR? 1.1.168.192.in-addr.arpa. (42) 09:23:38.872919 IP (tos 0x0, ttl 64, id 10693, offset 0, flags [none], length: 96) ns4.webspeed.dk.domain > desktop.home.60699: 27955* 1/0/0 192.168.1.1.in-addr.arpa. PTR[|domain] 09:23:42.812608 IP (tos 0x0, ttl 64, id 10694, offset 0, flags [none], length: 71) desktop.home.50272 > ns3.webspeed.dk.domain: [udp sum ok] 54960+ PTR? 11.1.168.192.in-addr.arpa. (43) 09:23:42.812996 IP (tos 0x0, ttl 64, id 10694, offset 0, flags [none], length: 72) ns3.webspeed.dk.domain > desktop.home.50272: [udp sum ok] 54960 NXDomain* 0/0/0 (44) 09:23:48.752704 IP (tos 0x0, ttl 64, id 10695, offset 0, flags [none], length: 70) desktop.home.50495 > ns3.webspeed.dk.domain: [udp sum ok] 4482+ PTR? 1.1.168.192.in-addr.arpa. (42) 09:23:48.753163 IP (tos 0x0, ttl 64, id 10695, offset 0, flags [none], length: 96) ns3.webspeed.dk.domain > desktop.home.50495: 4482* 1/0/0 192.168.1.1.in-addr.arpa. PTR[|domain] 09:23:48.882715 IP (tos 0x0, ttl 64, id 10696, offset 0, flags [none], length: 70) desktop.home.60655 > ns3.webspeed.dk.domain: [udp sum ok] 27955+ PTR? 1.1.168.192.in-addr.arpa. (42) 09:23:48.883122 IP (tos 0x0, ttl 64, id 10696, offset 0, flags [none], length: 96) ns3.webspeed.dk.domain > desktop.home.60655: 27955* 1/0/0 192.168.1.1.in-addr.arpa. PTR[|domain] 09:23:58.467639 arp who-has thinkpad.home tell 192.168.1.1 09:24:02.822909 IP (tos 0x0, ttl 64, id 10697, offset 0, flags [none], length: 71) desktop.home.58324 > ns4.webspeed.dk.domain: [udp sum ok] 54960+ PTR? 11.1.168.192.in-addr.arpa. (43) 09:24:02.823383 IP (tos 0x0, ttl 64, id 10697, offset 0, flags [none], length: 72) ns4.webspeed.dk.domain > desktop.home.58324: [udp sum ok] 54960 NXDomain* 0/0/0 (44) 09:24:08.443866 arp who-has desktop.home tell 192.168.1.1 09:24:08.443942 arp reply desktop.home is-at 00:01:02:f6:03:03 09:24:08.762984 IP (tos 0x0, ttl 64, id 10698, offset 0, flags [none], length: 70) desktop.home.58985 > ns4.webspeed.dk.domain: [udp sum ok] 4482+ PTR? 1.1.168.192.in-addr.arpa. (42) 09:24:08.763407 IP (tos 0x0, ttl 64, id 10698, offset 0, flags [none], length: 96) ns4.webspeed.dk.domain > desktop.home.58985: 4482* 1/0/0 192.168.1.1.in-addr.arpa. PTR[|domain] 09:24:08.893010 IP (tos 0x0, ttl 64, id 10699, offset 0, flags [none], length: 70) desktop.home.63428 > ns4.webspeed.dk.domain: [udp sum ok] 27955+ PTR? 1.1.168.192.in-addr.arpa. (42) 09:24:08.893428 IP (tos 0x0, ttl 64, id 10699, offset 0, flags [none], length: 96) ns4.webspeed.dk.domain > desktop.home.63428: 27955* 1/0/0 192.168.1.1.in-addr.arpa. PTR[|domain] 09:24:22.421019 IP (tos 0x0, ttl 128, id 556, offset 0, flags [none], length: 237) thinkpad.home.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138) 09:24:22.836514 IP (tos 0x0, ttl 64, id 10700, offset 0, flags [DF], length: 108) desktop.home.ssh > thinkpad.home.1050: P 1758:1826(68) ack 957 win 65535 09:24:22.838338 IP (tos 0x0, ttl 128, id 557, offset 0, flags [DF], length: 140) thinkpad.home.1050 > desktop.home.ssh: P 957:1057(100) ack 1826 win 60360 09:24:22.851261 IP (tos 0x0, ttl 64, id 10701, offset 0, flags [DF], length: 108) desktop.home.ssh > thinkpad.home.1050: P 1826:1894(68) ack 1057 win 65535 09:24:23.030463 IP (tos 0x0, ttl 128, id 558, offset 0, flags [DF], length: 40) thinkpad.home.1050 > desktop.home.ssh: . [tcp sum ok] ack 1894 win 60292 09:24:26.352750 IP (tos 0x0, ttl 128, id 559, offset 0, flags [DF], length: 316) thinkpad.home.1050 > desktop.home.ssh: P 1057:1333(276) ack 1894 win 60292 09:24:26.359089 IP (tos 0x0, ttl 64, id 10702, offset 0, flags [DF], length: 92) desktop.home.ssh > thinkpad.home.1050: P 1894:1946(52) ack 1333 win 65535 09:24:26.360832 IP (tos 0x0, ttl 128, id 560, offset 0, flags [DF], length: 316) thinkpad.home.1050 > desktop.home.ssh: P 1333:1609(276) ack 1946 win 60240 09:24:26.373295 IP (tos 0x0, ttl 64, id 10703, offset 0, flags [DF], length: 76) desktop.home.ssh > thinkpad.home.1050: P [tcp sum ok] 1946:1982(36) ack 1609 win 65535 09:24:26.374908 IP (tos 0x0, ttl 128, id 561, offset 0, flags [DF], length: 108) thinkpad.home.1050 > desktop.home.ssh: P 1609:1677(68) ack 1982 win 60204 09:24:26.384049 IP (tos 0x0, ttl 64, id 10704, offset 0, flags [DF], length: 92) desktop.home.ssh > thinkpad.home.1050: P 1982:2034(52) ack 1677 win 65535 09:24:26.385765 IP (tos 0x0, ttl 128, id 562, offset 0, flags [DF], length: 140) thinkpad.home.1050 > desktop.home.ssh: P 1677:1777(100) ack 2034 win 60152 09:24:26.391860 IP (tos 0x0, ttl 64, id 10705, offset 0, flags [DF], length: 76) desktop.home.ssh > thinkpad.home.1050: P [tcp sum ok] 2034:2070(36) ack 1777 win 65535 09:24:26.393329 IP (tos 0x0, ttl 128, id 563, offset 0, flags [DF], length: 92) thinkpad.home.1050 > desktop.home.ssh: P 1777:1829(52) ack 2070 win 60116 09:24:26.403901 IP (tos 0x10, ttl 64, id 10706, offset 0, flags [DF], length: 128) desktop.home.ssh > thinkpad.home.1050: P 2070:2158(88) ack 1829 win 65535 09:24:26.409829 IP (tos 0x10, ttl 64, id 10707, offset 0, flags [DF], length: 1420) desktop.home.ssh > thinkpad.home.1050: P 2158:3538(1380) ack 1829 win 65535 09:24:26.411651 IP (tos 0x0, ttl 128, id 564, offset 0, flags [DF], length: 40) thinkpad.home.1050 > desktop.home.ssh: . [tcp sum ok] ack 3538 win 60480 09:24:26.433522 IP (tos 0x10, ttl 64, id 10708, offset 0, flags [DF], length: 108) desktop.home.ssh > thinkpad.home.1050: P 3538:3606(68) ack 1829 win 65535 09:24:26.436364 IP (tos 0x10, ttl 64, id 10709, offset 0, flags [DF], length: 140) desktop.home.ssh > thinkpad.home.1050: P 3606:3706(100) ack 1829 win 65535 09:24:26.437590 IP (tos 0x0, ttl 128, id 565, offset 0, flags [DF], length: 40) thinkpad.home.1050 > desktop.home.ssh: . [tcp sum ok] ack 3706 win 60312 09:24:26.441657 IP (tos 0x10, ttl 64, id 10710, offset 0, flags [DF], length: 92) desktop.home.ssh > thinkpad.home.1050: P 3706:3758(52) ack 1829 win 65535 09:24:26.636116 IP (tos 0x0, ttl 128, id 566, offset 0, flags [DF], length: 40) thinkpad.home.1050 > desktop.home.ssh: . [tcp sum ok] ack 3758 win 60260 09:24:27.073805 IP (tos 0x0, ttl 128, id 567, offset 0, flags [DF], length: 92) thinkpad.home.1050 > desktop.home.ssh: P 1829:1881(52) ack 3758 win 60260 09:24:27.079891 IP (tos 0x10, ttl 64, id 10711, offset 0, flags [DF], length: 92) desktop.home.ssh > thinkpad.home.1050: P 3758:3810(52) ack 1881 win 65535 09:24:27.237025 IP (tos 0x0, ttl 128, id 568, offset 0, flags [DF], length: 40) thinkpad.home.1050 > desktop.home.ssh: . [tcp sum ok] ack 3810 win 60208 09:24:27.263162 IP (tos 0x0, ttl 128, id 569, offset 0, flags [DF], length: 92) thinkpad.home.1050 > desktop.home.ssh: P 1881:1933(52) ack 3810 win 60208 09:24:27.263769 IP (tos 0x10, ttl 64, id 10712, offset 0, flags [DF], length: 92) desktop.home.ssh > thinkpad.home.1050: P 3810:3862(52) ack 1933 win 65535 09:24:27.412079 IP (tos 0x0, ttl 128, id 570, offset 0, flags [DF], length: 92) thinkpad.home.1050 > desktop.home.ssh: P 1933:1985(52) ack 3862 win 60156 09:24:27.412752 IP (tos 0x10, ttl 64, id 10713, offset 0, flags [DF], length: 92) desktop.home.ssh > thinkpad.home.1050: P 3862:3914(52) ack 1985 win 65535 09:24:27.522041 IP (tos 0x0, ttl 128, id 571, offset 0, flags [DF], length: 92) thinkpad.home.1050 > desktop.home.ssh: P 1985:2037(52) ack 3914 win 60104 09:24:27.522687 IP (tos 0x10, ttl 64, id 10714, offset 0, flags [DF], length: 92) desktop.home.ssh > thinkpad.home.1050: P 3914:3966(52) ack 2037 win 65535 09:24:27.637675 IP (tos 0x0, ttl 128, id 572, offset 0, flags [DF], length: 40) thinkpad.home.1050 > desktop.home.ssh: . [tcp sum ok] ack 3966 win 60052 09:24:27.775913 IP (tos 0x0, ttl 128, id 573, offset 0, flags [DF], length: 92) thinkpad.home.1050 > desktop.home.ssh: P 2037:2089(52) ack 3966 win 60052 09:24:27.778694 IP (tos 0x10, ttl 64, id 10715, offset 0, flags [DF], length: 92) desktop.home.ssh > thinkpad.home.1050: P 3966:4018(52) ack 2089 win 65535 09:24:27.781565 IP (tos 0x10, ttl 64, id 10716, offset 0, flags [DF], length: 160) desktop.home.ssh > thinkpad.home.1050: P 4018:4138(120) ack 2089 win 65535 09:24:27.781856 IP (tos 0x10, ttl 64, id 10717, offset 0, flags [DF], length: 112) desktop.home.ssh > thinkpad.home.1050: P 4138:4210(72) ack 2089 win 65535 09:24:27.782768 IP (tos 0x0, ttl 128, id 574, offset 0, flags [DF], length: 40) thinkpad.home.1050 > desktop.home.ssh: . [tcp sum ok] ack 4138 win 59880 09:24:27.783487 IP (tos 0x0, ttl 128, id 575, offset 0, flags [DF], length: 76) thinkpad.home.1050 > desktop.home.ssh: P [tcp sum ok] 2089:2125(36) ack 4210 win 59808 09:24:27.783700 IP (tos 0x0, ttl 128, id 576, offset 0, flags [DF], length: 40) thinkpad.home.1050 > desktop.home.ssh: F [tcp sum ok] 2125:2125(0) ack 4210 win 59808 09:24:27.783775 IP (tos 0x10, ttl 64, id 10718, offset 0, flags [DF], length: 40) desktop.home.ssh > thinkpad.home.1050: . [tcp sum ok] ack 2126 win 65535 09:24:27.785053 IP (tos 0x10, ttl 64, id 10719, offset 0, flags [DF], length: 40) desktop.home.ssh > thinkpad.home.1050: F [tcp sum ok] 4210:4210(0) ack 2126 win 65535 09:24:27.786138 IP (tos 0x0, ttl 128, id 577, offset 0, flags [DF], length: 40) thinkpad.home.1050 > desktop.home.ssh: . [tcp sum ok] ack 4211 win 59808 09:24:29.805158 IP (tos 0x0, ttl 64, id 10720, offset 0, flags [none], length: 72) desktop.home.56359 > ns3.webspeed.dk.domain: [udp sum ok] 4483+ PTR? 255.1.168.192.in-addr.arpa. (44) 09:24:29.805569 IP (tos 0x0, ttl 64, id 10720, offset 0, flags [none], length: 76) ns3.webspeed.dk.domain > desktop.home.56359: [udp sum ok] 4483 NXDomain* 0/0/0 (48) 09:24:29.927224 IP (tos 0x0, ttl 64, id 10721, offset 0, flags [none], length: 72) desktop.home.64931 > ns3.webspeed.dk.domain: [udp sum ok] 27956+ PTR? 255.1.168.192.in-addr.arpa. (44) 09:24:29.927620 IP (tos 0x0, ttl 64, id 10721, offset 0, flags [none], length: 76) ns3.webspeed.dk.domain > desktop.home.64931: [udp sum ok] 27956 NXDomain* 0/0/0 (48) 09:24:34.813399 IP (tos 0x0, ttl 64, id 10722, offset 0, flags [none], length: 72) desktop.home.58459 > ns4.webspeed.dk.domain: [udp sum ok] 4483+ PTR? 255.1.168.192.in-addr.arpa. (44) 09:24:34.813806 IP (tos 0x0, ttl 64, id 10722, offset 0, flags [none], length: 76) ns4.webspeed.dk.domain > desktop.home.58459: [udp sum ok] 4483 NXDomain* 0/0/0 (48) 09:24:34.933421 IP (tos 0x0, ttl 64, id 10723, offset 0, flags [none], length: 72) desktop.home.58206 > ns4.webspeed.dk.domain: [udp sum ok] 27956+ PTR? 255.1.168.192.in-addr.arpa. (44) 09:24:34.933847 IP (tos 0x0, ttl 64, id 10723, offset 0, flags [none], length: 76) ns4.webspeed.dk.domain > desktop.home.58206: [udp sum ok] 27956 NXDomain* 0/0/0 (48) 09:24:39.823475 IP (tos 0x0, ttl 64, id 10724, offset 0, flags [none], length: 72) desktop.home.61436 > ns3.webspeed.dk.domain: [udp sum ok] 4483+ PTR? 255.1.168.192.in-addr.arpa. (44) 09:24:39.823863 IP (tos 0x0, ttl 64, id 10724, offset 0, flags [none], length: 76) ns3.webspeed.dk.domain > desktop.home.61436: [udp sum ok] 4483 NXDomain* 0/0/0 (48) 09:24:39.943484 IP (tos 0x0, ttl 64, id 10725, offset 0, flags [none], length: 72) desktop.home.49962 > ns3.webspeed.dk.domain: [udp sum ok] 27956+ PTR? 255.1.168.192.in-addr.arpa. (44) 09:24:39.943910 IP (tos 0x0, ttl 64, id 10725, offset 0, flags [none], length: 76) ns3.webspeed.dk.domain > desktop.home.49962: [udp sum ok] 27956 NXDomain* 0/0/0 (48) 09:24:44.833592 IP (tos 0x0, ttl 64, id 10726, offset 0, flags [none], length: 72) desktop.home.52796 > ns4.webspeed.dk.domain: [udp sum ok] 4483+ PTR? 255.1.168.192.in-addr.arpa. (44) 09:24:44.833977 IP (tos 0x0, ttl 64, id 10726, offset 0, flags [none], length: 76) ns4.webspeed.dk.domain > desktop.home.52796: [udp sum ok] 4483 NXDomain* 0/0/0 (48) 09:24:44.953556 IP (tos 0x0, ttl 64, id 10727, offset 0, flags [none], length: 72) desktop.home.50240 > ns4.webspeed.dk.domain: [udp sum ok] 27956+ PTR? 255.1.168.192.in-addr.arpa. (44) 09:24:44.953997 IP (tos 0x0, ttl 64, id 10727, offset 0, flags [none], length: 76) ns4.webspeed.dk.domain > desktop.home.50240: [udp sum ok] 27956 NXDomain* 0/0/0 (48) 09:24:49.843622 IP (tos 0x0, ttl 64, id 10728, offset 0, flags [none], length: 72) desktop.home.51602 > ns3.webspeed.dk.domain: [udp sum ok] 4483+ PTR? 255.1.168.192.in-addr.arpa. (44) 09:24:49.844018 IP (tos 0x0, ttl 64, id 10728, offset 0, flags [none], length: 76) ns3.webspeed.dk.domain > desktop.home.51602: [udp sum ok] 4483 NXDomain* 0/0/0 (48) 09:24:49.963619 IP (tos 0x0, ttl 64, id 10729, offset 0, flags [none], length: 72) desktop.home.57978 > ns3.webspeed.dk.domain: [udp sum ok] 27956+ PTR? 255.1.168.192.in-addr.arpa. (44) 09:24:49.964078 IP (tos 0x0, ttl 64, id 10729, offset 0, flags [none], length: 76) ns3.webspeed.dk.domain > desktop.home.57978: [udp sum ok] 27956 NXDomain* 0/0/0 (48) 09:24:58.325610 arp who-has thinkpad.home tell 192.168.1.1 09:24:59.853790 IP (tos 0x0, ttl 64, id 10730, offset 0, flags [none], length: 72) desktop.home.61725 > ns4.webspeed.dk.domain: [udp sum ok] 4483+ PTR? 255.1.168.192.in-addr.arpa. (44) 09:24:59.854632 IP (tos 0x0, ttl 64, id 10730, offset 0, flags [none], length: 76) ns4.webspeed.dk.domain > desktop.home.61725: [udp sum ok] 4483 NXDomain* 0/0/0 (48) 09:24:59.973774 IP (tos 0x0, ttl 64, id 10731, offset 0, flags [none], length: 72) desktop.home.51773 > ns4.webspeed.dk.domain: [udp sum ok] 27956+ PTR? 255.1.168.192.in-addr.arpa. (44) 09:24:59.974192 IP (tos 0x0, ttl 64, id 10731, offset 0, flags [none], length: 76) ns4.webspeed.dk.domain > desktop.home.51773: [udp sum ok] 27956 NXDomain* 0/0/0 (48) 09:25:08.301319 arp who-has desktop.home tell 192.168.1.1 09:25:08.301389 arp reply desktop.home is-at 00:01:02:f6:03:03 09:25:09.863923 IP (tos 0x0, ttl 64, id 10732, offset 0, flags [none], length: 72) desktop.home.52974 > ns3.webspeed.dk.domain: [udp sum ok] 4483+ PTR? 255.1.168.192.in-addr.arpa. (44) 09:25:09.864333 IP (tos 0x0, ttl 64, id 10732, offset 0, flags [none], length: 76) ns3.webspeed.dk.domain > desktop.home.52974: [udp sum ok] 4483 NXDomain* 0/0/0 (48) 09:25:09.983976 IP (tos 0x0, ttl 64, id 10733, offset 0, flags [none], length: 72) desktop.home.55266 > ns3.webspeed.dk.domain: [udp sum ok] 27956+ PTR? 255.1.168.192.in-addr.arpa. (44) 09:25:09.984358 IP (tos 0x0, ttl 64, id 10733, offset 0, flags [none], length: 76) ns3.webspeed.dk.domain > desktop.home.55266: [udp sum ok] 27956 NXDomain* 0/0/0 (48) 09:25:29.874241 IP (tos 0x0, ttl 64, id 10734, offset 0, flags [none], length: 72) desktop.home.54740 > ns4.webspeed.dk.domain: [udp sum ok] 4483+ PTR? 255.1.168.192.in-addr.arpa. (44) 09:25:29.874653 IP (tos 0x0, ttl 64, id 10734, offset 0, flags [none], length: 76) ns4.webspeed.dk.domain > desktop.home.54740: [udp sum ok] 4483 NXDomain* 0/0/0 (48) 09:25:29.994268 IP (tos 0x0, ttl 64, id 10735, offset 0, flags [none], length: 72) desktop.home.52644 > ns4.webspeed.dk.domain: [udp sum ok] 27956+ PTR? 255.1.168.192.in-addr.arpa. (44) 09:25:29.994652 IP (tos 0x0, ttl 64, id 10735, offset 0, flags [none], length: 76) ns4.webspeed.dk.domain > desktop.home.52644: [udp sum ok] 27956 NXDomain* 0/0/0 (48) 09:25:52.504663 IP (tos 0x0, ttl 64, id 10736, offset 0, flags [none], length: 241) desktop.home.netbios-dgm > 10.10.3.7.netbios-dgm: NBT UDP PACKET(138) 09:25:52.934997 IP (tos 0x0, ttl 64, id 10737, offset 0, flags [none], length: 68) desktop.home.62233 > ns3.webspeed.dk.domain: [udp sum ok] 4484+ PTR? 7.3.10.10.in-addr.arpa. (40) 09:25:52.944764 IP (tos 0x0, ttl 119, id 48159, offset 0, flags [none], length: 145) ns3.webspeed.dk.domain > desktop.home.62233: 4484 NXDomain 0/1/0 (117) 09:25:53.035021 IP (tos 0x0, ttl 64, id 10738, offset 0, flags [none], length: 68) desktop.home.61296 > ns3.webspeed.dk.domain: [udp sum ok] 27957+ PTR? 7.3.10.10.in-addr.arpa. (40) 09:25:53.050085 IP (tos 0x0, ttl 119, id 48220, offset 0, flags [none], length: 145) ns3.webspeed.dk.domain > desktop.home.61296: 27957 NXDomain 0/1/0 (117) 09:25:58.182530 arp who-has thinkpad.home tell 192.168.1.1 09:26:08.158861 arp who-has desktop.home tell 192.168.1.1 09:26:08.158936 arp reply desktop.home is-at 00:01:02:f6:03:03 09:26:58.039975 arp who-has thinkpad.home tell 192.168.1.1 09:27:08.016261 arp who-has desktop.home tell 192.168.1.1 09:27:08.016338 arp reply desktop.home is-at 00:01:02:f6:03:03 09:27:57.897990 arp who-has thinkpad.home tell 192.168.1.1 09:28:07.873643 arp who-has desktop.home tell 192.168.1.1 09:28:07.873718 arp reply desktop.home is-at 00:01:02:f6:03:03 09:28:31.517488 IP (tos 0x0, ttl 128, id 578, offset 0, flags [none], length: 78) thinkpad.home.netbios-ns > 192.168.1.255.netbios-ns: [udp sum ok] NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 09:28:32.265964 IP (tos 0x0, ttl 128, id 579, offset 0, flags [none], length: 78) thinkpad.home.netbios-ns > 192.168.1.255.netbios-ns: [udp sum ok] NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 09:28:33.017195 IP (tos 0x0, ttl 128, id 580, offset 0, flags [none], length: 78) thinkpad.home.netbios-ns > 192.168.1.255.netbios-ns: [udp sum ok] NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 09:28:37.624981 IP (tos 0x0, ttl 128, id 581, offset 0, flags [none], length: 229) thinkpad.home.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138) 09:28:57.637635 IP (tos 0x0, ttl 64, id 10748, offset 0, flags [none], length: 241) desktop.home.netbios-dgm > 10.10.3.7.netbios-dgm: NBT UDP PACKET(138) 09:28:57.754859 arp who-has thinkpad.home tell 192.168.1.1 09:29:07.731136 arp who-has desktop.home tell 192.168.1.1 09:29:07.731210 arp reply desktop.home is-at 00:01:02:f6:03:03 09:29:57.612348 arp who-has thinkpad.home tell 192.168.1.1 09:30:07.588553 arp who-has desktop.home tell 192.168.1.1 09:30:07.588639 arp reply desktop.home is-at 00:01:02:f6:03:03 ^C 186 packets captured 186 packets received by filter 0 packets dropped by kernel