Re: Wget, Yum and network investigation

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



2006/2/27, Bob Chiodini <rchiodin@xxxxxxxxxxxxx>:
> On Mon, 2006-02-27 at 14:12 +0100, antonio montagnani wrote:
> > 2006/2/27, antonio montagnani <antonio.montagnani@xxxxxxxxx>:
> > > 2006/2/27, antonio montagnani <antonio.montagnani@xxxxxxxxx>:
> > > >
> >
> >
> > This is the text file ofethereal dumping with failure using wget
> > http://download.fedora.redhat.com/pub/fedora/linux/core/4/i386/os/repodata/repomd.xml
> > ____________________________________________________________________________
> > No.     Time        Source                Destination           Protocol Info
> >      1 0.000000    218.219.30.89         87.4.92.27            TCP
> >  35214 > 1238 [PSH, ACK] Seq=0 Ack=0 Win=64617 Len=201
> >
> > Frame 1 (263 bytes on wire, 263 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 218.219.30.89 (218.219.30.89), Dst: 87.4.92.27
> > (87.4.92.27)
> > Transmission Control Protocol, Src Port: 35214 (35214), Dst Port: 1238
> > (1238), Seq: 0, Ack: 0, Len: 201
> > Data (201 bytes)
> >
> > 0000  90 99 45 d1 4f 07 13 e4 cb 17 c9 da 6c 50 0e 96   ..E.O.......lP..
> > 0010  9c 78 ae a1 65 ec 20 27 ce 53 60 28 8f b5 48 8e   .x..e. '.S`(..H.
> > 0020  ba d8 fe 99 94 53 b8 4a 16 fe e5 25 98 b9 3d ca   .....S.J...%..=.
> > 0030  a2 a7 0c 78 97 76 1f a6 ef 3e db 77 93 96 4a 2d   ...x.v...>.w..J-
> > 0040  b0 22 33 df ad b9 14 63 12 ca 4e c1 f8 7a a5 bd   ."3....c..N..z..
> > 0050  fa 0d 4a 4b b2 be ea 0b 25 f0 18 8b 05 a0 7e 0e   ..JK....%.....~.
> > 0060  cf 28 bb 06 75 5f 3d 5c 2c 19 0a df 44 12 77 b2   .(..u_=\,...D.w.
> > 0070  bb 56 a7 ba 3a 4a be 17 59 50 81 24 1e 3e 67 b0   .V..:J..YP.$.>g.
> > 0080  c1 66 14 0b 66 10 bf dd 64 96 d4 fd c1 83 4b 42   .f..f...d.....KB
> > 0090  12 4c f4 8b 67 2c 5d 20 a7 f2 af b6 97 b3 71 79   .L..g,] ......qy
> > 00a0  0a 52 3c c0 79 8c 59 96 3e c8 26 47 ff 59 25 8c   .R<.y.Y.>.&G.Y%.
> > 00b0  68 66 f8 98 c3 c7 47 7d 9e 1f ce 41 f9 7c 46 65   hf....G}...A.|Fe
> > 00c0  3f 69 8f 67 61 31 32 b3 bb                        ?i.ga12..
> >
> > No.     Time        Source                Destination           Protocol Info
> >      2 0.003637    87.4.92.27            218.219.30.89         TCP
> >  1238 > 35214 [PSH, ACK] Seq=0 Ack=201 Win=16605 Len=16
> >
> > Frame 2 (78 bytes on wire, 78 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 218.219.30.89
> > (218.219.30.89)
> > Transmission Control Protocol, Src Port: 1238 (1238), Dst Port: 35214
> > (35214), Seq: 0, Ack: 201, Len: 16
> > Data (16 bytes)
> >
> > 0000  38 8a 95 e7 71 f0 c7 88 db 7b 0d 29 0e 93 6a 02   8...q....{.)..j.
> >
> > No.     Time        Source                Destination           Protocol Info
> >      3 0.017261    87.4.92.27            255.255.255.255       CUPS
> >  ipp://Contec:631/printers/printer (idle)
> >
> > Frame 3 (104 bytes on wire, 104 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 255.255.255.255
> > (255.255.255.255)
> > User Datagram Protocol, Src Port: ipp (631), Dst Port: ipp (631)
> > Common Unix Printing System (CUPS) Browsing Protocol
> >
> > No.     Time        Source                Destination           Protocol Info
> >      4 0.346590    218.219.30.89         87.4.92.27            TCP
> >  35214 > 1238 [PSH, ACK] Seq=201 Ack=16 Win=64601 Len=274
> >
> > Frame 4 (336 bytes on wire, 336 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 218.219.30.89 (218.219.30.89), Dst: 87.4.92.27
> > (87.4.92.27)
> > Transmission Control Protocol, Src Port: 35214 (35214), Dst Port: 1238
> > (1238), Seq: 201, Ack: 16, Len: 274
> > Data (274 bytes)
> >
> > 0000  11 61 35 c4 1f 05 ab 9a 92 06 30 59 8a fc bb 0b   .a5.......0Y....
> > 0010  2d 5f c0 a5 0f 2e 62 d1 5c f3 39 00 a5 53 26 55   -_....b.\.9..S&U
> > 0020  e5 6b b6 36 66 78 86 2c ed 4c 96 a5 33 7d c2 da   .k.6fx.,.L..3}..
> > 0030  9a be 50 28 00 2f e4 e3 39 15 40 b7 5d 08 91 f2   ..P(./..9.@.]...
> > 0040  d2 47 6a ad c5 7d d6 2b 55 a6 2d a2 a2 c6 85 b2   .Gj..}.+U.-.....
> > 0050  99 6c 9d 6d 50 ff 62 cd e5 d7 9b 2f 39 bf a4 50   .l.mP.b..../9..P
> > 0060  76 bb 05 eb 7e f7 d4 f8 81 98 2a 48 4a dd 34 60   v...~.....*HJ.4`
> > 0070  0d ee bc bc e5 42 e3 47 49 12 09 f7 53 18 b1 62   .....B.GI...S..b
> > 0080  44 72 86 50 e3 bc 10 19 fa 09 e5 f0 32 ed a3 88   Dr.P........2...
> > 0090  8a fd f5 32 19 53 3e f2 a4 f8 f7 25 28 2e e5 8d   ...2.S>....%(...
> > 00a0  e7 f9 47 f7 c4 b7 83 b2 8e aa 38 57 66 09 52 06   ..G.......8Wf.R.
> > 00b0  b8 d9 54 e3 b2 c8 01 bf fa f0 86 b2 6f 5b 99 c6   ..T.........o[..
> > 00c0  ba b7 8d b7 bd 2a c9 44 c4 ab 22 e6 c7 c5 33 47   .....*.D.."...3G
> > 00d0  a3 34 10 c3 73 86 57 c5 c8 4c c7 7f e4 a8 86 f4   .4..s.W..L......
> > 00e0  eb 1e a7 1b 70 69 ab 15 2d 1a 39 18 6c 01 dc f6   ....pi..-.9.l...
> > 00f0  c6 3a 88 96 aa 90 fb de ff 09 20 ef ac 3b 86 be   .:........ ..;..
> > 0100  6c e9 e0 42 d5 6c fb 77 a7 cc 09 43 38 4c 7c 95   l..B.l.w...C8L|.
> > 0110  62 74                                             bt
> >
> > No.     Time        Source                Destination           Protocol Info
> >      5 0.453008    87.4.92.27            218.219.30.89         TCP
> >  1238 > 35214 [ACK] Seq=16 Ack=475 Win=16331 Len=0
> >
> > Frame 5 (62 bytes on wire, 62 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 218.219.30.89
> > (218.219.30.89)
> > Transmission Control Protocol, Src Port: 1238 (1238), Dst Port: 35214
> > (35214), Seq: 16, Ack: 475, Len: 0
> >
> > No.     Time        Source                Destination           Protocol Info
> >      6 1.300864    87.4.184.241          87.4.92.27            TCP
> >  1302 > 135 [SYN] Seq=0 Ack=0 Win=53760 Len=0 MSS=1414 WS=3 TSV=0
> > TSER=0
> >
> > Frame 6 (86 bytes on wire, 86 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.184.241 (87.4.184.241), Dst: 87.4.92.27
> > (87.4.92.27)
> > Transmission Control Protocol, Src Port: 1302 (1302), Dst Port: 135
> > (135), Seq: 0, Ack: 0, Len: 0
> >
> > No.     Time        Source                Destination           Protocol Info
> >      7 2.821787    218.219.30.89         87.4.92.27            TCP
> >  35214 > 1238 [PSH, ACK] Seq=475 Ack=16 Win=64601 Len=138
> >
> > Frame 7 (200 bytes on wire, 200 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 218.219.30.89 (218.219.30.89), Dst: 87.4.92.27
> > (87.4.92.27)
> > Transmission Control Protocol, Src Port: 35214 (35214), Dst Port: 1238
> > (1238), Seq: 475, Ack: 16, Len: 138
> > Data (138 bytes)
> >
> > 0000  1d 15 33 20 01 33 f6 51 34 aa 9d 48 3b 74 57 fd   ..3 .3.Q4..H;tW.
> > 0010  c5 e7 35 73 31 73 6f 0c da d6 97 63 5d 3e 49 8d   ..5s1so....c]>I.
> > 0020  c3 26 43 96 cb be d0 d8 24 fd fa 49 78 bd 12 b3   .&C.....$..Ix...
> > 0030  8a 5c cf 42 8b 7a a0 5e 2f 22 c2 9c 51 3d 2d 48   .\.B.z.^/"..Q=-H
> > 0040  82 5a ba 12 1d 48 fe 67 39 50 dc b3 23 e3 31 14   .Z...H.g9P..#.1.
> > 0050  3a b0 16 79 b9 99 5c 1e 37 ce 3d 36 d2 e2 9b 4d   :..y..\.7.=6...M
> > 0060  60 43 ea 91 e5 27 06 6d 91 61 84 38 45 6a 3a 14   `C...'.m.a.8Ej:.
> > 0070  12 0d 1c 7d 05 20 33 d1 39 a5 72 a6 44 d4 6a d8   ...}. 3.9.r.D.j.
> > 0080  60 2c e5 2d dc c4 6d aa 0b c4                     `,.-..m...
> >
> > No.     Time        Source                Destination           Protocol Info
> >      8 2.824523    87.4.92.27            218.219.30.89         TCP
> >  1238 > 35214 [PSH, ACK] Seq=16 Ack=613 Win=16193 Len=4
> >
> > Frame 8 (66 bytes on wire, 66 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 218.219.30.89
> > (218.219.30.89)
> > Transmission Control Protocol, Src Port: 1238 (1238), Dst Port: 35214
> > (35214), Seq: 16, Ack: 613, Len: 4
> > Data (4 bytes)
> >
> > 0000  43 25 0b fd                                       C%..
> >
> > No.     Time        Source                Destination           Protocol Info
> >      9 3.313175    218.219.30.89         87.4.92.27            TCP
> >  35214 > 1238 [ACK] Seq=613 Ack=20 Win=64597 Len=0
> >
> > Frame 9 (68 bytes on wire, 68 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 218.219.30.89 (218.219.30.89), Dst: 87.4.92.27
> > (87.4.92.27)
> > Transmission Control Protocol, Src Port: 35214 (35214), Dst Port: 1238
> > (1238), Seq: 613, Ack: 20, Len: 0
> >
> > No.     Time        Source                Destination           Protocol Info
> >     10 4.264879    87.4.184.241          87.4.92.27            TCP
> >  1302 > 135 [SYN] Seq=0 Ack=0 Win=430080 Len=0 MSS=1414 WS=3 TSV=0
> > TSER=0
> >
> > Frame 10 (86 bytes on wire, 86 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.184.241 (87.4.184.241), Dst: 87.4.92.27
> > (87.4.92.27)
> > Transmission Control Protocol, Src Port: 1302 (1302), Dst Port: 135
> > (135), Seq: 0, Ack: 0, Len: 0
> >
> > No.     Time        Source                Destination           Protocol Info
> >     11 6.545830    87.4.92.27            218.219.30.89         UDP
> >  Source port: 44165  Destination port: 35214
> >
> > Frame 11 (150 bytes on wire, 150 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 218.219.30.89
> > (218.219.30.89)
> > User Datagram Protocol, Src Port: 44165 (44165), Dst Port: 35214 (35214)
> > Data (100 bytes)
> >
> > 0000  c5 4b 02 f9 ed fa 28 25 61 70 43 94 32 1a aa d3   .K....(%apC.2...
> > 0010  f5 87 c4 20 d9 0a d2 f8 18 5c c8 dc bb 0f 96 7d   ... .....\.....}
> > 0020  bb 59 17 fd 87 56 62 77 50 0c c2 fa 80 e6 5b d7   .Y...VbwP.....[.
> > 0030  80 3a b7 06 0f 93 9f c9 5e 8d 18 a0 9a 17 4e 44   .:......^.....ND
> > 0040  b7 5d 17 bc 75 53 0a 76 ff 36 04 36 58 6a 47 33   .]..uS.v.6.6XjG3
> > 0050  30 33 93 dc a3 ae 58 d5 7b 80 9f 46 19 bd 0f 14   03....X.{..F....
> > 0060  ba 01 d6 5d                                       ...]
> >
> > No.     Time        Source                Destination           Protocol Info
> >     12 8.573753    87.4.92.27            218.219.30.89         UDP
> >  Source port: 44165  Destination port: 35214
> >
> > Frame 12 (150 bytes on wire, 150 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 218.219.30.89
> > (218.219.30.89)
> > User Datagram Protocol, Src Port: 44165 (44165), Dst Port: 35214 (35214)
> > Data (100 bytes)
> >
> > 0000  c5 4b 02 33 6d 9c 79 25 61 70 43 1b 87 0b 7c 99   .K.3m.y%apC...|.
> > 0010  20 de 4d 41 5f 52 70 b3 b5 ac b3 3d 83 22 5d dc    .MA_Rp....=."].
> > 0020  cf 0c 68 8c 5b c3 e0 3d e2 f8 5b ec 5f 38 72 c6   ..h.[..=..[._8r.
> > 0030  d3 7d 43 3d 87 13 22 bb d3 a9 68 ce 38 c5 45 ac   .}C=.."...h.8.E.
> > 0040  4f b4 d8 38 3b 63 1f ad 3d 29 4c d0 d2 b7 e3 1d   O..8;c..=)L.....
> > 0050  04 ac 9a b9 3a 7e 05 3d e8 19 8f 7c e2 1b 43 a1   ....:~.=...|..C.
> > 0060  7b 9f 06 f1                                       {...
> >
> > No.     Time        Source                Destination           Protocol Info
> >     13 9.021233    87.4.92.27            255.255.255.255       CUPS
> >  ipp://Contec:631/printers/HP_Celeron (idle)
> >
> > Frame 13 (203 bytes on wire, 203 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 255.255.255.255
> > (255.255.255.255)
> > User Datagram Protocol, Src Port: ipp (631), Dst Port: ipp (631)
> > Common Unix Printing System (CUPS) Browsing Protocol
> >
> > No.     Time        Source                Destination           Protocol Info
> >     14 12.621767   87.4.92.27            218.219.30.89         UDP
> >  Source port: 44165  Destination port: 35214
> >
> > Frame 14 (150 bytes on wire, 150 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 218.219.30.89
> > (218.219.30.89)
> > User Datagram Protocol, Src Port: 44165 (44165), Dst Port: 35214 (35214)
> > Data (100 bytes)
> >
> > 0000  c5 4b 02 5c 31 b4 56 25 61 70 43 e6 69 fe 8d f8   .K.\1.V%apC.i...
> > 0010  27 d4 ba 78 79 e1 5e ad 7c ed 8f 3f 56 02 33 9d   '..xy.^.|..?V.3.
> > 0020  23 02 d2 94 fc f8 e3 e8 29 51 7a 6b 57 41 6b ec   #.......)QzkWAk.
> > 0030  f7 71 fc 9b 9e 46 19 61 f1 62 06 56 b8 02 58 33   .q...F.a.b.V..X3
> > 0040  5a 51 fb 4e 9f 12 c1 47 ef 39 31 0b fe cd 73 d8   ZQ.N...G.91...s.
> > 0050  f1 14 a1 4f fd 64 5f c4 56 59 11 b7 f4 00 7f 44   ...O.d_.VY.....D
> > 0060  38 1b 85 d1                                       8...
> >
> > No.     Time        Source                Destination           Protocol Info
> >     15 12.737203   87.4.234.37           87.4.92.27            TCP
> >  1145 > microsoft-ds [SYN] Seq=0 Ack=0 Win=53760 Len=0 MSS=1460 WS=3
> > TSV=0 TSER=0
> >
> > Frame 15 (86 bytes on wire, 86 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.234.37 (87.4.234.37), Dst: 87.4.92.27 (87.4.92.27)
> > Transmission Control Protocol, Src Port: 1145 (1145), Dst Port:
> > microsoft-ds (445), Seq: 0, Ack: 0, Len: 0
> > ----------------------------------------------------------------------------------------------------------------------------------
> >
> > This is the otput of wget --inet4-only
> > http://download.fedora.redhat.com/pub/fedora/linux/core/4/i386/os/repodata/repomd.xml
> > that was o.k.
> >
> > No.     Time        Source                Destination           Protocol Info
> >      1 0.000000    87.4.92.27            212.216.112.112       DNS
> >  Standard query A download.fedora.redhat.com
> >
> > Frame 1 (94 bytes on wire, 94 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 212.216.112.112
> > (212.216.112.112)
> > User Datagram Protocol, Src Port: 32776 (32776), Dst Port: domain (53)
> > Domain Name System (query)
> >
> > No.     Time        Source                Destination           Protocol Info
> >      2 0.091685    212.216.112.112       87.4.92.27            DNS
> >  Standard query response A 66.187.224.20 A 209.132.176.20 A
> > 209.132.176.220 A 209.132.176.221
> >
> > Frame 2 (260 bytes on wire, 260 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 212.216.112.112 (212.216.112.112), Dst:
> > 87.4.92.27 (87.4.92.27)
> > User Datagram Protocol, Src Port: domain (53), Dst Port: 32776 (32776)
> > Domain Name System (response)
> >
> > No.     Time        Source                Destination           Protocol Info
> >      3 0.093732    87.4.92.27            66.187.224.20         TCP
> >  35598 > http [SYN] Seq=0 Ack=0 Win=5808 Len=0 MSS=1412 TSV=501123
> > TSER=0 WS=2
> >
> > Frame 3 (82 bytes on wire, 82 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 66.187.224.20
> > (66.187.224.20)
> > Transmission Control Protocol, Src Port: 35598 (35598), Dst Port: http
> > (80), Seq: 0, Ack: 0, Len: 0
> >
> > No.     Time        Source                Destination           Protocol Info
> >      4 0.287018    66.187.224.20         87.4.92.27            TCP
> >  http > 35598 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460
> > TSV=971646217 TSER=501123 WS=2
> >
> > Frame 4 (82 bytes on wire, 82 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 66.187.224.20 (66.187.224.20), Dst: 87.4.92.27
> > (87.4.92.27)
> > Transmission Control Protocol, Src Port: http (80), Dst Port: 35598
> > (35598), Seq: 0, Ack: 1, Len: 0
> >
> > No.     Time        Source                Destination           Protocol Info
> >      5 0.287544    87.4.92.27            66.187.224.20         TCP
> >  35598 > http [ACK] Seq=1 Ack=1 Win=5808 Len=0 TSV=501171
> > TSER=971646217
> >
> > Frame 5 (74 bytes on wire, 74 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 66.187.224.20
> > (66.187.224.20)
> > Transmission Control Protocol, Src Port: 35598 (35598), Dst Port: http
> > (80), Seq: 1, Ack: 1, Len: 0
> >
> > No.     Time        Source                Destination           Protocol Info
> >      6 0.288332    87.4.92.27            66.187.224.20         HTTP
> >  GET /pub/fedora/linux/core/4/i386/os/repodata/repomd.xml HTTP/1.0
> >
> > Frame 6 (258 bytes on wire, 258 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 66.187.224.20
> > (66.187.224.20)
> > Transmission Control Protocol, Src Port: 35598 (35598), Dst Port: http
> > (80), Seq: 1, Ack: 1, Len: 184
> > Hypertext Transfer Protocol
> >
> > No.     Time        Source                Destination           Protocol Info
> >      7 0.489036    66.187.224.20         87.4.92.27            TCP
> >  http > 35598 [ACK] Seq=1 Ack=185 Win=5792 Len=0 TSV=971646420
> > TSER=501171
> >
> > Frame 7 (74 bytes on wire, 74 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 66.187.224.20 (66.187.224.20), Dst: 87.4.92.27
> > (87.4.92.27)
> > Transmission Control Protocol, Src Port: http (80), Dst Port: 35598
> > (35598), Seq: 1, Ack: 185, Len: 0
> >
> > No.     Time        Source                Destination           Protocol Info
> >      8 0.490576    66.187.224.20         87.4.92.27            TCP
> >  [TCP segment of a reassembled PDU]
> >
> > Frame 8 (415 bytes on wire, 415 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 66.187.224.20 (66.187.224.20), Dst: 87.4.92.27
> > (87.4.92.27)
> > Transmission Control Protocol, Src Port: http (80), Dst Port: 35598
> > (35598), Seq: 1, Ack: 185, Len: 341
> >
> > No.     Time        Source                Destination           Protocol Info
> >      9 0.491014    87.4.92.27            66.187.224.20         TCP
> >  35598 > http [ACK] Seq=185 Ack=342 Win=6880 Len=0 TSV=501222
> > TSER=971646420
> >
> > Frame 9 (74 bytes on wire, 74 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 66.187.224.20
> > (66.187.224.20)
> > Transmission Control Protocol, Src Port: 35598 (35598), Dst Port: http
> > (80), Seq: 185, Ack: 342, Len: 0
> >
> > No.     Time        Source                Destination           Protocol Info
> >     10 0.493578    66.187.224.20         87.4.92.27            HTTP
> >  HTTP/1.1 200 OK
> >
> > Frame 10 (1214 bytes on wire, 1214 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 66.187.224.20 (66.187.224.20), Dst: 87.4.92.27
> > (87.4.92.27)
> > Transmission Control Protocol, Src Port: http (80), Dst Port: 35598
> > (35598), Seq: 342, Ack: 185, Len: 1140
> > Reassembled TCP Segments (1481 bytes): #8(341), #10(1140)
> > Hypertext Transfer Protocol
> > eXtensible Markup Language
> >
> > No.     Time        Source                Destination           Protocol Info
> >     11 0.494153    87.4.92.27            66.187.224.20         TCP
> >  35598 > http [ACK] Seq=185 Ack=1482 Win=9160 Len=0 TSV=501223
> > TSER=971646420
> >
> > Frame 11 (74 bytes on wire, 74 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 66.187.224.20
> > (66.187.224.20)
> > Transmission Control Protocol, Src Port: 35598 (35598), Dst Port: http
> > (80), Seq: 185, Ack: 1482, Len: 0
> >
> > No.     Time        Source                Destination           Protocol Info
> >     12 0.554566    87.4.92.27            66.187.224.20         TCP
> >  35598 > http [FIN, ACK] Seq=185 Ack=1482 Win=9160 Len=0 TSV=501238
> > TSER=971646420
> >
> > Frame 12 (74 bytes on wire, 74 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 66.187.224.20
> > (66.187.224.20)
> > Transmission Control Protocol, Src Port: 35598 (35598), Dst Port: http
> > (80), Seq: 185, Ack: 1482, Len: 0
> >
> > No.     Time        Source                Destination           Protocol Info
> >     13 0.746015    66.187.224.20         87.4.92.27            TCP
> >  http > 35598 [FIN, ACK] Seq=1482 Ack=186 Win=5792 Len=0 TSV=971646677
> > TSER=501238
> >
> > Frame 13 (74 bytes on wire, 74 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 66.187.224.20 (66.187.224.20), Dst: 87.4.92.27
> > (87.4.92.27)
> > Transmission Control Protocol, Src Port: http (80), Dst Port: 35598
> > (35598), Seq: 1482, Ack: 186, Len: 0
> >
> > No.     Time        Source                Destination           Protocol Info
> >     14 0.746535    87.4.92.27            66.187.224.20         TCP
> >  35598 > http [ACK] Seq=186 Ack=1483 Win=9160 Len=0 TSV=501286
> > TSER=971646677
> >
> > Frame 14 (74 bytes on wire, 74 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 66.187.224.20
> > (66.187.224.20)
> > Transmission Control Protocol, Src Port: 35598 (35598), Dst Port: http
> > (80), Seq: 186, Ack: 1483, Len: 0
> >
> > No.     Time        Source                Destination           Protocol Info
> >     15 5.528412    EdimaxTe_1e:b9:51     Cisco_09:00:aa        PPP LCP
> >  Echo Request
> >
> > Frame 15 (30 bytes on wire, 30 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > PPP Link Control Protocol
> >
> > No.     Time        Source                Destination           Protocol Info
> >     16 5.577832    Cisco_09:00:aa        EdimaxTe_1e:b9:51     PPP LCP
> >  Echo Reply
> >
> > Frame 16 (60 bytes on wire, 60 bytes captured)
> > Ethernet II, Src: Cisco_09:00:aa (00:0f:34:09:00:aa), Dst:
> > EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > PPP Link Control Protocol
> >
> > No.     Time        Source                Destination           Protocol Info
> >     17 12.720364   87.4.92.27            255.255.255.255       CUPS
> >  ipp://Contec:631/printers/Epson915 (idle)
> >
> > Frame 17 (193 bytes on wire, 193 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 255.255.255.255
> > (255.255.255.255)
> > User Datagram Protocol, Src Port: ipp (631), Dst Port: ipp (631)
> > Common Unix Printing System (CUPS) Browsing Protocol
> >
> > No.     Time        Source                Destination           Protocol Info
> >     18 13.712727   87.4.92.27            255.255.255.255       CUPS
> >  ipp://Contec:631/printers/HP_Celeron (idle)
> >
> > Frame 18 (203 bytes on wire, 203 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 255.255.255.255
> > (255.255.255.255)
> > User Datagram Protocol, Src Port: ipp (631), Dst Port: ipp (631)
> > Common Unix Printing System (CUPS) Browsing Protocol
> >
> > No.     Time        Source                Destination           Protocol Info
> >     19 14.712935   87.4.92.27            255.255.255.255       CUPS
> >  ipp://Contec:631/printers/printer (idle)
> >
> > Frame 19 (104 bytes on wire, 104 bytes captured)
> > Ethernet II, Src: EdimaxTe_1e:b9:51 (00:50:fc:1e:b9:51), Dst:
> > Cisco_09:00:aa (00:0f:34:09:00:aa)
> > PPP-over-Ethernet Session
> > Point-to-Point Protocol
> > Internet Protocol, Src: 87.4.92.27 (87.4.92.27), Dst: 255.255.255.255
> > (255.255.255.255)
> > User Datagram Protocol, Src Port: ipp (631), Dst Port: ipp (631)
> > Common Unix Printing System (CUPS) Browsing Protocol
> > ------------------------------------------------------------------------------------------------------------------------------
> >
> > I attach also the ethereal files...
>
>
> Antonio,
>

Some clarifications:

> Some questions and thoughts.
>
> One thing I haven't noticed over the email threads:  Are any related
> messages appearing in /var/log/messages, /var/log/audit/*,
> or /var/log/secure?
>
> What happens if you do a yum clean all?  Then try running yum update.
> That should not fix your problem, but it cannot hurt.

Already done: no improvement
>
> Also, is SELinux enabled?  If so, try turning it off.  selinux=0
> appended to the boot command in GRUB.
>

No, SELinux is not enabled
__________________________________________________________________________
> Can you turn off iptables (service iptables stop) and try yum again.

As it is  a router, I assume that I can't stop iptables: and in any
case it doesn't explain different behaviour of wget if flagged or not
> Also post the output of iptables -L.
___________________________________________________________________________
Generated by iptables-save v1.2.6a on Fri Feb 21 09:27:33 2003
*nat
:OUTPUT ACCEPT [0:0]
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -s 192.168.0.0/24 -o ppp0 -j MASQUERADE
# Forward HTTP connections to Squid proxy
-A PREROUTING -p tcp -m tcp -i eth0 --dport 80 -j REDIRECT --to-ports 3128
COMMIT
# Completed on Fri Feb 21 09:27:33 2003
# Generated by iptables-save v1.2.6a on Fri Feb 21 09:27:33 2003
*mangle
:PREROUTING ACCEPT [9:432]
:INPUT ACCEPT [3:234]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [9:684]
:POSTROUTING ACCEPT [17:1292]
COMMIT
# Completed on Fri Feb 21 09:27:33 2003
# Generated by iptables-save v1.2.6a on Fri Feb 21 09:27:33 2003
*filter
:FORWARD DROP [0:0]
:INPUT DROP [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i eth0 -j ACCEPT
-A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -i eth0 -j ACCEPT
COMMIT
# Completed on Fri Feb 21 09:27:33 2003

>
> Maybe unrelated:  In the above network traffic, what is the port 1238
> traffic to/from user89-net218219030.ayu.ne.jp?  UDP port 1238 is defined
> as hacl-qs, but I cannot find what it does.  Take a look at netstat -n |
> grep 1238.

I will check tomorrow morning, now I am at home, so server is out of
my reach :-)
>
> I took a quick look at the attached ethereal data.  There does not seem
> to be any traffic to your DNS server or to redhat, for testfailed.  This
> sure points to some kind of proxy running on the same box.  Try ethereal
> on the lo interface.
>
yes, there is no traffic to redhat, if I use wget with no flag or yum,
but traffic is existing with flagged wget

> One other thought:  Try stopping mDNSResponder (service mDNSResponder
> stop).
>
I will try it: I do not understand why mDNS should be a problem with
no-flag wget (and yum), otherwise it is o.k.

>
>
I have a doubt to have upgraded some part with some extra repository
causing this weirdness...but how can I check??

Tnx for assistance

--
Antonio Montagnani
Skype : antoniomontag


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux