2011.10.05 Doug Smythies. Packet sniffer capture on external network from before firewall rules were added to filter RFC1918 packets. see also the internal file for this same time period. "<< bla bla" are notes added". The PS3 in on the internal network at 192.168.111.109 and is 209.121.28.192 on this external network file Note: some unrelated DNS and other local client traffic has been deleted. 2011-08-05 22:06:16.089496 IP 209.170.69.10.3074 > 209.121.28.192.54336: Flags [.], seq 122675:124135, ack 18804, win 185, length 1460 << Exact same starting point as internal file. 2011-08-05 22:06:16.092534 IP 209.121.28.192.54336 > 209.170.69.10.3074: Flags [.], ack 124135, win 64240, length 0 2011-08-05 22:06:16.092889 IP 209.170.69.10.3074 > 209.121.28.192.54336: Flags [P.], seq 124135:125428, ack 18804, win 185, length 1293 2011-08-05 22:06:16.113750 IP 209.121.28.192.3074 > 192.168.2.2.3074: UDP, length 29 << Destination IP address is not allowed under RFC1918, and is not routable. 2011-08-05 22:06:16.114341 IP 209.121.28.192.3074 > 68.98.28.91.3074: UDP, length 29 << Destination IP address is not allowed under RFC1918, and is not routable. 2011-08-05 22:06:16.114541 IP 209.121.28.192.3074 > 192.168.1.2.3077: UDP, length 29 << Destination IP address is not allowed under RFC1918, and is not routable. 2011-08-05 22:06:16.114741 IP 209.121.28.192.3074 > 173.67.29.158.3077: UDP, length 29 2011-08-05 22:06:16.115244 IP 209.121.28.192.3074 > 192.168.0.10.3074: UDP, length 29 2011-08-05 22:06:16.115859 IP 209.121.28.192.3074 > 68.113.182.133.3074: UDP, length 29 2011-08-05 22:06:16.116082 IP 209.121.28.192.3074 > 192.168.1.3.3074: UDP, length 29 2011-08-05 22:06:16.116275 IP 209.121.28.192.3074 > 68.35.138.107.3074: UDP, length 29 2011-08-05 22:06:16.200397 IP 68.98.28.91.3158 > 209.121.28.192.3074: UDP, length 29 2011-08-05 22:06:16.231420 IP 68.35.138.107.3074 > 209.121.28.192.3074: UDP, length 29 2011-08-05 22:06:16.242648 IP 209.121.28.192.3074 > 68.35.138.107.3074: UDP, length 17 2011-08-05 22:06:16.293882 IP 209.121.28.192.54336 > 209.170.69.10.3074: Flags [.], ack 125428, win 65535, length 0 2011-08-05 22:06:16.314444 IP 10.21.0.254 > 209.121.28.192: ICMP net 192.168.2.2 unreachable, length 36 << This is my ISP complaining that I tried to send packets to an RFC1918 address 2011-08-05 22:06:16.315400 IP 10.21.0.254 > 209.121.28.192: ICMP net 192.168.1.2 unreachable, length 36 << This is my ISP complaining that I tried to send packets to an RFC1918 address 2011-08-05 22:06:16.317119 IP 10.21.0.254 > 209.121.28.192: ICMP net 192.168.0.10 unreachable, length 36 << This is my ISP complaining that I tried to send packets to an RFC1918 address 2011-08-05 22:06:16.317604 IP 10.21.0.254 > 209.121.28.192: ICMP net 192.168.1.3 unreachable, length 36 << This is my ISP complaining that I tried to send packets to an RFC1918 address 2011-08-05 22:06:16.343516 IP 68.35.138.107.3074 > 209.121.28.192.3074: UDP, length 26 2011-08-05 22:06:16.361500 IP 68.113.182.133.3074 > 209.121.28.192.3074: UDP, length 29 2011-08-05 22:06:16.376093 IP 209.121.28.192.3074 > 68.113.182.133.3074: UDP, length 17 2011-08-05 22:06:16.594080 IP 68.113.182.133.3074 > 209.121.28.192.3074: UDP, length 26 2011-08-05 22:06:17.027064 IP 209.121.28.192.3074 > 68.199.125.216.3074: UDP, length 29 2011-08-05 22:06:17.027585 IP 209.121.28.192.3074 > 68.199.125.216.3074: UDP, length 29 2011-08-05 22:06:17.027833 IP 209.121.28.192.3074 > 67.166.36.235.3074: UDP, length 29 2011-08-05 22:06:17.027995 IP 209.121.28.192.3074 > 67.166.36.235.3074: UDP, length 29 2011-08-05 22:06:17.028534 IP 209.121.28.192.3074 > 68.51.255.199.3074: UDP, length 29 2011-08-05 22:06:17.028689 IP 209.121.28.192.3074 > 68.51.255.199.3074: UDP, length 29 2011-08-05 22:06:17.029258 IP 209.121.28.192.3074 > 192.168.1.2.3074: UDP, length 29 << Destination IP address is not allowed under RFC1918, and is not routable. 2011-08-05 22:06:17.029789 IP 209.121.28.192.3074 > 189.114.163.228.10391: UDP, length 29 2011-08-05 22:06:17.030023 IP 209.121.28.192.3074 > 192.168.1.4.3074: UDP, length 29 << Destination IP address is not allowed under RFC1918, and is not routable. 2011-08-05 22:06:17.030211 IP 209.121.28.192.3074 > 66.176.172.22.3074: UDP, length 29 2011-08-05 22:06:17.030722 IP 209.121.28.192.3074 > 192.168.1.2.3074: UDP, length 29 << Destination IP address is not allowed under RFC1918, and is not routable. 2011-08-05 22:06:17.031244 IP 209.121.28.192.3074 > 71.179.244.198.3074: UDP, length 29 2011-08-05 22:06:17.066335 IP 10.21.0.254 > 209.121.28.192: ICMP net 192.168.1.2 unreachable, length 36 << This is my ISP complaining that I tried to send packets to an RFC1918 address 2011-08-05 22:06:17.068020 IP 10.21.0.254 > 209.121.28.192: ICMP net 192.168.1.4 unreachable, length 36 << This is my ISP complaining that I tried to send packets to an RFC1918 address 2011-08-05 22:06:17.069517 IP 10.21.0.254 > 209.121.28.192: ICMP net 192.168.1.2 unreachable, length 36 << This is my ISP complaining that I tried to send packets to an RFC1918 address 2011-08-05 22:06:17.103756 IP 67.166.36.235.3074 > 209.121.28.192.3074: UDP, length 29 2011-08-05 22:06:17.108676 IP 67.166.36.235.3074 > 209.121.28.192.3074: UDP, length 29 2011-08-05 22:06:17.110681 IP 209.121.28.192.3074 > 67.166.36.235.3074: UDP, length 17 2011-08-05 22:06:17.143941 IP 68.199.125.216.3074 > 209.121.28.192.3074: UDP, length 29 2011-08-05 22:06:17.144163 IP 68.199.125.216.3074 > 209.121.28.192.3074: UDP, length 29 2011-08-05 22:06:17.163129 IP 68.51.255.199.3074 > 209.121.28.192.3074: UDP, length 29 2011-08-05 22:06:17.167554 IP 68.51.255.199.3074 > 209.121.28.192.3074: UDP, length 29 2011-08-05 22:06:17.170577 IP 209.121.28.192.3074 > 68.199.125.216.3074: UDP, length 17 2011-08-05 22:06:17.176448 IP 71.179.244.198.3074 > 209.121.28.192.3074: UDP, length 29 2011-08-05 22:06:17.178542 IP 209.121.28.192.3074 > 68.51.255.199.3074: UDP, length 17 2011-08-05 22:06:17.181131 IP 66.176.172.22.3074 > 209.121.28.192.3074: UDP, length 29 2011-08-05 22:06:17.189987 IP 67.166.36.235.3074 > 209.121.28.192.3074: UDP, length 26 2011-08-05 22:06:17.193355 IP 209.121.28.192.3074 > 71.179.244.198.3074: UDP, length 17 2011-08-05 22:06:17.193516 IP 209.121.28.192.3074 > 66.176.172.22.3074: UDP, length 17 2011-08-05 22:06:17.284865 IP 68.199.125.216.3074 > 209.121.28.192.3074: UDP, length 26 2011-08-05 22:06:17.288277 IP 189.114.163.228.10391 > 209.121.28.192.3074: UDP, length 29 2011-08-05 22:06:17.293939 IP 209.121.28.192.3074 > 189.114.163.228.10391: UDP, length 17 2011-08-05 22:06:17.314193 IP 68.51.255.199.3074 > 209.121.28.192.3074: UDP, length 26 2011-08-05 22:06:17.345932 IP 71.179.244.198.3074 > 209.121.28.192.3074: UDP, length 26 2011-08-05 22:06:17.347148 IP 66.176.172.22.3074 > 209.121.28.192.3074: UDP, length 26 2011-08-05 22:06:17.548237 IP 189.114.163.228.10391 > 209.121.28.192.3074: UDP, length 26 2011-08-05 22:06:17.768505 IP 173.67.29.158.3077 > 209.121.28.192.3074: UDP, length 29 2011-08-05 22:06:17.777666 IP 209.121.28.192.3074 > 173.67.29.158.3077: UDP, length 17 2011-08-05 22:06:17.946433 IP 209.121.28.192.3074 > 192.168.1.113.3076: UDP, length 29 2011-08-05 22:06:17.946941 IP 209.121.28.192.3074 > 71.62.57.77.3076: UDP, length 29 2011-08-05 22:06:17.947147 IP 209.121.28.192.3074 > 75.95.188.32.3074: UDP, length 29 2011-08-05 22:06:17.947313 IP 209.121.28.192.3074 > 75.95.188.32.3074: UDP, length 29 2011-08-05 22:06:17.947459 IP 209.121.28.192.3074 > 192.168.1.2.3074: UDP, length 29 << Destination IP address is not allowed under RFC1918, and is not routable. 2011-08-05 22:06:17.948010 IP 209.121.28.192.3074 > 69.124.220.51.3074: UDP, length 29 2011-08-05 22:06:17.948206 IP 209.121.28.192.3074 > 10.0.1.9.3074: UDP, length 29 << Destination IP address is not allowed under RFC1918, and is not routable. 2011-08-05 22:06:17.948743 IP 209.121.28.192.3074 > 71.228.87.234.48273: UDP, length 29 2011-08-05 22:06:17.948977 IP 209.121.28.192.3074 > 192.168.2.102.3074: UDP, length 29 << Destination IP address is not allowed under RFC1918, and is not routable. 2011-08-05 22:06:17.949905 IP 209.121.28.192.3074 > 68.45.48.117.3074: UDP, length 29 2011-08-05 22:06:17.950058 IP 209.121.28.192.3074 > 192.168.1.2.3074: UDP, length 29 << Destination IP address is not allowed under RFC1918, and is not routable. 2011-08-05 22:06:17.950602 IP 209.121.28.192.3074 > 98.238.137.61.55040: UDP, length 29 2011-08-05 22:06:17.951202 IP 209.121.28.192.3074 > 192.168.1.3.3074: UDP, length 29 << Destination IP address is not allowed under RFC1918, and is not routable. 2011-08-05 22:06:17.951824 IP 209.121.28.192.3074 > 24.147.70.44.55010: UDP, length 29 2011-08-05 22:06:17.952053 IP 209.121.28.192.3074 > 192.168.0.3.3074: UDP, length 29 << Destination IP address is not allowed under RFC1918, and is not routable. 2011-08-05 22:06:17.952235 IP 209.121.28.192.3074 > 24.162.244.31.3074: UDP, length 29 2011-08-05 22:06:17.976164 IP 10.21.0.254 > 209.121.28.192: ICMP net 192.168.1.113 unreachable, length 36 << This is my ISP complaining that I tried to send packets to an RFC1918 address 2011-08-05 22:06:17.979569 IP 10.21.0.254 > 209.121.28.192: ICMP net 192.168.1.2 unreachable, length 36 << This is my ISP complaining that I tried to send packets to an RFC1918 address 2011-08-05 22:06:17.981818 IP 10.21.0.254 > 209.121.28.192: ICMP net 10.0.1.9 unreachable, length 36 << This is my ISP complaining that I tried to send packets to an RFC1918 address 2011-08-05 22:06:17.983253 IP 10.21.0.254 > 209.121.28.192: ICMP net 192.168.2.102 unreachable, length 36 << This is my ISP complaining that I tried to send packets to an RFC1918 address 2011-08-05 22:06:17.985468 IP 10.21.0.254 > 209.121.28.192: ICMP net 192.168.1.2 unreachable, length 36 << This is my ISP complaining that I tried to send packets to an RFC1918 address 2011-08-05 22:06:17.987431 IP 10.21.0.254 > 209.121.28.192: ICMP net 192.168.1.3 unreachable, length 36 << This is my ISP complaining that I tried to send packets to an RFC1918 address 2011-08-05 22:06:17.989176 IP 10.21.0.254 > 209.121.28.192: ICMP net 192.168.0.3 unreachable, length 36 << This is my ISP complaining that I tried to send packets to an RFC1918 address 2011-08-05 22:06:18.087249 IP 71.62.57.77.3076 > 209.121.28.192.3074: UDP, length 29 2011-08-05 22:06:18.094557 IP 209.121.28.192.3074 > 71.62.57.77.3076: UDP, length 17 2011-08-05 22:06:18.096612 IP 71.228.87.234.48273 > 209.121.28.192.3074: UDP, length 29 2011-08-05 22:06:18.097079 IP 69.124.220.51.3074 > 209.121.28.192.3074: UDP, length 29 2011-08-05 22:06:18.101042 IP 24.162.244.31.3074 > 209.121.28.192.3074: UDP, length 29 2011-08-05 22:06:18.110666 IP 209.121.28.192.3074 > 71.228.87.234.48273: UDP, length 17 2011-08-05 22:06:18.110916 IP 209.121.28.192.3074 > 69.124.220.51.3074: UDP, length 17 2011-08-05 22:06:18.111097 IP 209.121.28.192.3074 > 24.162.244.31.3074: UDP, length 17 << Exact same end point as internal file.