так-же заметил вот это: #tcpdump host 192.168.1.151 15:59:38.720180 arp who-has myserv tell mc151 15:59:38.720189 arp reply myserv is-at 00:15:17:80:08:bb (oui Unknown) 15:59:38.720430 IP mt151.49495 > myserv.smtp: S 565877608:565877608(0) win 8192 <mss 1460,nop,wscale 2,nop,nop,sackOK> 15:59:38.720461 IP myserv.smtp > mc151.49495: S 798177577:798177577(0) ack 565877609 win 65535 <mss 1460,nop,wscale 1,sackOK,eol> 15:59:38.720680 IP mt151.49495 > myserv.smtp: . ack 1 win 16425 15:59:38.722099 IP myserv.56805 > mc151.auth: S 1208383005:1208383005(0) win 65535 <mss 1460,nop,wscale 1,nop,nop,timestamp 451888695 0,sackOK,eol> 15:59:41.722274 IP myserv.56805 > mc151.auth: S 1208383005:1208383005(0) win 65535 <mss 1460,nop,wscale 1,nop,nop,timestamp 451891695 0,sackOK,eol> 15:59:44.922786 IP myserv.56805 > mc151.auth: S 1208383005:1208383005(0) win 65535 <mss 1460,nop,wscale 1,nop,nop,timestamp 451894895 0,sackOK,eol> 15:59:48.123295 IP myserv.56805 > mc151.auth: S 1208383005:1208383005(0) win 65535 <mss 1460,sackOK,eol> 15:59:51.323804 IP myserv.56805 > mc151.auth: S 1208383005:1208383005(0) win 65535 <mss 1460,sackOK,eol> 15:59:54.524316 IP myserv.56805 > mc151.auth: S 1208383005:1208383005(0) win 65535 <mss 1460,sackOK,eol> 16:00:00.725304 IP myserv.56805 > mc151.auth: S 1208383005:1208383005(0) win 65535 <mss 1460,sackOK,eol> 16:00:17.002769 IP myserv.smtp > mc151.49495: P 1:27(26) ack 1 win 32850 [skip] 16:00:17.011231 IP myserv.smtp > mc151.49495: P 135:155(20) ack 515 win 32850 16:00:17.011242 IP myserv.smtp > mc151.49495: F 155:155(0) ack 515 win 32850 16:00:17.011527 IP mc151.49495 > myserv.smtp: . ack 156 win 16386 16:00:17.085235 IP mc151.49495 > myserv.smtp: F 515:515(0) ack 156 win 16386 16:00:17.085266 IP myserv.smtp > mc151.49495: . ack 516 win 32849Очень надеюсь на помощь, или хотя бы на подсказку, куда капать.
|