Skip to content

Instantly share code, notes, and snippets.

@sjorge

sjorge/10_ping Secret

Created Oct 17, 2020
Embed
What would you like to do?
## started a ping, started snoop on vnic, stopped snoop
## dups come and go with snoop running or not
[axion :: sjorge][~]
[●]$ ping 10.23.10.225
PING 10.23.10.225 (10.23.10.225): 56 data bytes
64 bytes from 10.23.10.225: icmp_seq=0 ttl=255 time=1.518 ms
64 bytes from 10.23.10.225: icmp_seq=1 ttl=255 time=2.270 ms
64 bytes from 10.23.10.225: icmp_seq=2 ttl=255 time=2.234 ms
64 bytes from 10.23.10.225: icmp_seq=3 ttl=255 time=1.502 ms
64 bytes from 10.23.10.225: icmp_seq=4 ttl=255 time=1.674 ms
64 bytes from 10.23.10.225: icmp_seq=4 ttl=255 time=1.894 ms (DUP!)
64 bytes from 10.23.10.225: icmp_seq=5 ttl=255 time=1.734 ms
64 bytes from 10.23.10.225: icmp_seq=5 ttl=255 time=1.748 ms (DUP!)
64 bytes from 10.23.10.225: icmp_seq=6 ttl=255 time=1.559 ms
64 bytes from 10.23.10.225: icmp_seq=6 ttl=255 time=1.572 ms (DUP!)
64 bytes from 10.23.10.225: icmp_seq=7 ttl=255 time=1.481 ms
64 bytes from 10.23.10.225: icmp_seq=7 ttl=255 time=1.496 ms (DUP!)
64 bytes from 10.23.10.225: icmp_seq=8 ttl=255 time=1.650 ms
64 bytes from 10.23.10.225: icmp_seq=9 ttl=255 time=1.614 ms
64 bytes from 10.23.10.225: icmp_seq=10 ttl=255 time=1.660 ms
64 bytes from 10.23.10.225: icmp_seq=11 ttl=255 time=1.927 ms
64 bytes from 10.23.10.225: icmp_seq=12 ttl=255 time=2.011 ms
^C
--- 10.23.10.225 ping statistics ---
13 packets transmitted, 13 packets received, +4 duplicates, 0.0% packet loss
round-trip min/avg/max/stddev = 1.481/1.738/2.270/0.241 ms
[root@boron ~]# snoop -r -d vnic110
Using device vnic110 (promiscuous mode)
10.23.10.135 -> (broadcast) ARP C Who is 10.23.10.135, 10.23.10.135 ?
10.23.10.100 -> (broadcast) ARP C Who is 10.23.10.100, 10.23.10.100 ?
10.23.10.232 -> 10.23.10.225 ICMP Echo request (ID: 13316 Sequence number: 4)
10.23.10.232 -> 10.23.10.225 ICMP Echo request (ID: 13316 Sequence number: 4)
10.23.10.225 -> 10.23.10.232 ICMP Echo reply (ID: 13316 Sequence number: 4)
10.23.10.225 -> 10.23.10.232 ICMP Echo reply (ID: 13316 Sequence number: 4)
10.23.10.216 -> BROADCAST UDP D=32414 S=32415 LEN=31
10.23.10.216 -> BROADCAST UDP D=32412 S=32413 LEN=31
10.23.10.218 -> 224.0.0.251 MDNS R _hap._tcp.local. Internet PTR amethyst A181._hap._tcp.local.
10.23.10.218 -> (broadcast) ARP C Who is 10.23.10.218, 10.23.10.218 ?
10.23.10.225 -> * ARP C Who is 10.23.10.232, 10.23.10.232 ?
10.23.10.232 -> 10.23.10.225 ARP R 10.23.10.232, 10.23.10.232 is 98:1:a7:d3:31:b5
10.23.10.232 -> 10.23.10.225 ARP R 10.23.10.232, 10.23.10.232 is 98:1:a7:d3:31:b5
10.23.10.232 -> 10.23.10.225 ICMP Echo request (ID: 13316 Sequence number: 5)
10.23.10.225 -> 10.23.10.232 ICMP Echo reply (ID: 13316 Sequence number: 5)
10.23.10.232 -> 10.23.10.225 ICMP Echo request (ID: 13316 Sequence number: 5)
10.23.10.225 -> 10.23.10.232 ICMP Echo reply (ID: 13316 Sequence number: 5)
10.23.10.150 -> 10.23.10.255 UDP D=32412 S=36804 LEN=29
10.23.10.150 -> 10.23.10.255 UDP D=32414 S=63158 LEN=29
10.23.10.232 -> 10.23.10.225 ICMP Echo request (ID: 13316 Sequence number: 6)
10.23.10.232 -> 10.23.10.225 ICMP Echo request (ID: 13316 Sequence number: 6)
10.23.10.225 -> 10.23.10.232 ICMP Echo reply (ID: 13316 Sequence number: 6)
10.23.10.225 -> 10.23.10.232 ICMP Echo reply (ID: 13316 Sequence number: 6)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.