From owner-FreeBSD-users-jp@jp.freebsd.org  Thu Sep 17 18:22:34 1998
Received: (from daemon@localhost)
	by jaz.jp.freebsd.org (8.9.1+3.0W/8.7.3) id SAA10987;
	Thu, 17 Sep 1998 18:22:34 +0900 (JST)
	(envelope-from owner-FreeBSD-users-jp@jp.FreeBSD.org)
Received: from ns.anritsu.co.jp (root@ns.anritsu.co.jp [133.236.48.2])
	by jaz.jp.freebsd.org (8.9.1+3.0W/8.7.3) with ESMTP id SAA10980
	for <FreeBSD-users-jp@jp.freebsd.org>; Thu, 17 Sep 1998 18:22:32 +0900 (JST)
	(envelope-from matsu@ae.anritsu.co.jp)
Received: from gatekeeper.noc.anritsu.co.jp (root@gatekeeper.noc.anritsu.co.jp [133.236.19.7])
	by ns.anritsu.co.jp (8.8.8+2.7Wbeta7/3.6Wbeta7) with ESMTP id SAA08788
	for <FreeBSD-users-jp@jp.freebsd.org>; Thu, 17 Sep 1998 18:22:30 +0900 (JST)
Received: from acaekdb.pr.ae.anritsu.co.jp (root@acaekdb.pr.ae.anritsu.co.jp [133.236.80.27]) by gatekeeper.noc.anritsu.co.jp (8.8.8+2.7Wbeta7/3.5Wpl7) with ESMTP id SAA05798 for <FreeBSD-users-jp@jp.freebsd.org>; Thu, 17 Sep 1998 18:22:29 +0900 (JST)
Received: from acaekda.anritsu.co.jp (acaekda.pr.ae.anritsu.co.jp [133.236.80.26]) by acaekdb.pr.ae.anritsu.co.jp (8.8.5/3.5Wpl4) with SMTP id SAA08850; Thu, 17 Sep 1998 18:22:28 +0900 (JST)
Received: by acaekda.anritsu.co.jp (4.1/3.3W9)
	id AA27504; Thu, 17 Sep 98 18:22:27 JST
Date: Thu, 17 Sep 98 18:22:27 JST
Message-Id: <9809170922.AA27504@acaekda.anritsu.co.jp>
To: FreeBSD-users-jp@jp.freebsd.org
Cc: matsu@ae.anritsu.co.jp
From: matsu@ae.anritsu.co.jp (NATSUGARI Akihiko)
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-2022-JP
X-Mailer: mnews [version 1.20] 1996-12/08(Sun)
Reply-To: FreeBSD-users-jp@jp.freebsd.org
Precedence: bulk
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+980914
X-Sequence: FreeBSD-users-jp 33018
Subject: [FreeBSD-users-jp 33018] tcpdump(strange packets)
Errors-To: owner-FreeBSD-users-jp@jp.freebsd.org
Sender: owner-FreeBSD-users-jp@jp.freebsd.org

$B$J$D$,$j$G$9!#(B

$B%^%k%A%-%c%9%HMQ$N%D!<%k(Bnv$B!J(Bv3.3beta$B!K$r;HMQ$7$F(B
$B$$$k$N$G$9$,!"Aw?.FbMF$r(Btcpdump$B$GI=<($9$k$H!"K\MhAw?.$5$l$k(B
$B$O$:$N(BUDP$B%Q%1%C%H$H$OJL$N!"$h$/$o$+$i$J$$%Q%1%C%H$,8!=P$5$l(B
$B$F$$$^$9!#(B

$B@\B3@h$N%k!<%?!J(BFreeBSD2.2.5R + mrouted + routed$B!K$G(Btcpdump
$B$NFbMF$r3NG'$9$k$H!"(BUDP$B%Q%1%C%H$7$+I=<($5$l$^$;$s!#(B

$BAw?.85$N(BPC$B!J(BPC1$B!K$H@\B3@h$N%k!<%?!J(BRT1$B!K$N4V$K(Bsniffer$B$rF~$l(B
$B$FFbMF$r3NG'$7$F$b!"$d$O$j(BUDP$B%Q%1%C%H$7$+I=<($5$l$^$;$s!#(B

$BBP8~$K$7$F$$$k(BPC$B!J(BPC2$B!K$G$bF1MM$N8=>]$,=P$F$$$^$9!#(B
$B$3$N%Q%1%C%H$N@5BN$O2?$G$7$g$&$+!#(B


PC:    HP Vectra XA
OS:    FreeBSD2.2.5R
NIC:   fxp0 <Intel EtherExpress Pro 10/100B Ethernet> rev 2 int a irq 11
                    on pci0:6
       fxp0: Ethernet address 00:a0:c9:93:d3:34
       fxp1 <Intel EtherExpress Pro 10/100B Ethernet> rev 2 int a irq 10
                    on pci0:7
       fxp1: Ethernet address 00:a0:c9:93:cb:a4
       lnc1 <PCNet/PCI Ethernet adapter> rev 37 int a irq 11 on pci0:11
       lnc1: NE2100 (C-LANCE) address 00:60:b0:5e:e6:58


      +---+41.41.41.41    41.1.1.1
      |PC1|---------------------- RT1 ------ RT2 ------ RT3 ----- PC2
      +---+

----- ifconfig -a$B$NFbMF(B $B$3$3$+$i(B
% ifconfig -a
fxp0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
        inet 41.41.41.41 netmask 0xff000000 broadcast 41.255.255.255
        ether 00:a0:c9:93:d3:34
        media: autoselect
fxp1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        ether 00:a0:c9:93:cb:a4
        media: autoselect
lnc1: flags=802<BROADCAST,SIMPLEX> mtu 1500
        ether 00:60:b0:5e:e6:58
tun0: flags=8010<POINTOPOINT,MULTICAST> mtu 1500
sl0: flags=c010<POINTOPOINT,LINK2,MULTICAST> mtu 552
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
        inet 127.0.0.1 netmask 0xff000000
%
----- ifconfig -a$B$NFbMF(B $B$3$3$^$G(B

----- tcpdump -i fxp0$B$NFbMF!J0lItH4?h!K$3$3$+$i(B
17:03:26.302657 41.41.41.41.1576 > 225.0.0.2.10002: udp 1063
17:03:26.304366 4:4b:37:10:0:0 2:0:0:0:45:0 1011 1103:
                         3c3e 2929 2929 e100 0002 0628 2712 0437
                         644a 601c 3172 40cd 6d9d 8250 0170 1c1d
                         21c1 581b 3543 b4c1 fc04 0843 d2c1 f808
                         0f4b a5c1 f10f
17:03:26.304381 41.41.41.41.1576 > 225.0.0.2.10002: udp 1071
17:03:26.306283 4:53:37:11:0:0 2:0:0:0:45:0 1011 1111:
                         3c35 2929 2929 e100 0002 0628 2712 043f
                         567a 601c 3173 40cd 6d9d 8250 0170 1d06
                         2241 5c81 08f8 810f f141 1781 f808 81f1
                         0f41 2e81 f10f
17:03:26.306299 41.41.41.41.1576 > 225.0.0.2.10002: udp 1079
17:03:26.308348 4:2a:37:12:0:0 2:0:0:0:45:0 1011 1070:
                         3c5d 2929 2929 e100 0002 0628 2712 0416
                         886d 601c 3174 40cd 6d9d 8250 0170 1923
                         22c0 42fc 1ec0 f80f 0f41 f1c0 fcfc f1c0
                         08f1 0f41 0f41
17:03:26.308364 41.41.41.41.1576 > 225.0.0.2.10002: udp 1038
17:03:26.341099 4:4a:37:13:0:0 2:0:0:0:45:0 1011 1102:
                         3c3c 2929 2929 e100 0002 0628 2712 0436
                         c6fe 601c 3175 40cd 6d9d 8250 0170 1f0f
                         237b 7304 be02 037b 7304 be02 037b 7304
                         be02 037b 7304
17:03:26.341122 41.41.41.41.1576 > 225.0.0.2.10002: udp 1070
----- tcpdump -i fxp0$B$NFbMF!J0lItH4?h!K$3$3$^$G(B
---- /\ --------------------------------------
   _/-=\=--__   Anritsu Engineering Co.,Ltd
 -~/    \~=-_   NATSUGARI Akihiko
  *------*      E-mail: matsu@ae.anritsu.co.jp
