Script started on Wed 24 Jun 2015 02:40:54 PM CEST
]0;oho@chaos: ~/miniprojects/sniftranoho@chaos:~/miniprojects/sniftran$ ssh admin@10.108.17.49tcpdump -XXe -tt -ni port1 port not 22
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[16Pssh admin@10.108.17.49
Enter passphrase for key '/home/oho/.ssh/id_rsa': 
Password: 
> tcpdump -XXe -tttt -ni port1 port not 22
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on port1, link-type EN10MB (Ethernet), capture size 65535 bytes
2015-06-24 05:40:57.066601 00:0c:29:42:41:e2 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.17.254 tell 10.108.16.125, length 46
	0x0000:  ffff ffff ffff 000c 2942 41e2 0806 0001  ........)BA.....
	0x0010:  0800 0604 0001 000c 2942 41e2 0a6c 107d  ........)BA..l.}
	0x0020:  0000 0000 0000 0a6c 11fe 0000 0000 0000  .......l........
	0x0030:  0000 0000 0000 0000 0000 0000            ............
2015-06-24 05:40:57.114114 00:0c:29:13:c0:cf > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.17.254 tell 10.108.16.121, length 46
	0x0000:  ffff ffff ffff 000c 2913 c0cf 0806 0001  ........).......
	0x0010:  0800 0604 0001 000c 2913 c0cf 0a6c 1079  ........)....l.y
	0x0020:  0000 0000 0000 0a6c 11fe 0000 0000 0000  .......l........
	0x0030:  0000 0000 0000 0000 0000 0000            ............
2015-06-24 05:40:57.126350 00:0c:29:ad:25:66 > 33:33:ff:00:00:01, ethertype IPv6 (0x86dd), length 86: 2001:470:59af:18::16:161 > ff02::1:ff00:1: ICMP6, neighbor solicitation, who has 2001:470:59af:18::1, length 32
	0x0000:  3333 ff00 0001 000c 29ad 2566 86dd 6000  33......).%f..`.
	0x0010:  0000 0020 3aff 2001 0470 59af 0018 0000  ....:....pY.....
	0x0020:  0000 0016 0161 ff02 0000 0000 0000 0000  .....a..........
	0x0030:  0001 ff00 0001 8700 2c96 0000 0000 2001  ........,.......
	0x0040:  0470 59af 0018 0000 0000 0000 0001 0101  .pY.............
	0x0050:  000c 29ad 2566                           ..).%f
2015-06-24 05:40:57.126373 00:0c:29:ad:25:66 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.19.254 tell 10.108.16.161, length 46
	0x0000:  ffff ffff ffff 000c 29ad 2566 0806 0001  ........).%f....
	0x0010:  0800 0604 0001 000c 29ad 2566 0a6c 10a1  ........).%f.l..
	0x0020:  0000 0000 0000 0a6c 13fe 0000 0000 0000  .......l........
	0x0030:  0000 0000 0000 0000 0000 0000            ............
2015-06-24 05:40:57.158734 00:0c:29:44:34:87 > 33:33:00:01:00:02, ethertype IPv6 (0x86dd), length 156: fe80::80d2:e13d:c5ce:c480.546 > ff02::1:2.547: dhcp6 solicit
	0x0000:  3333 0001 0002 000c 2944 3487 86dd 6000  33......)D4...`.
	0x0010:  0000 0066 1101 fe80 0000 0000 0000 80d2  ...f............
	0x0020:  e13d c5ce c480 ff02 0000 0000 0000 0000  .=..............
	0x0030:  0000 0001 0002 0222 0223 0066 98d0 01aa  .......".#.f....
	0x0040:  2642 0008 0002 012c 0001 000e 0001 0001  &B.....,........
	0x0050:  18af 44fd 000c 2951 3fd3 0003 000c 1700  ..D...)Q?.......
	0x0060:  0c29 0000 0000 0000 0000 0027 0010 000e  .).........'....
	0x0070:  7065 7465 7273 656e 2d6d 6569 3137 0010  petersen-mei17..
	0x0080:  000e 0000 0137 0008 4d53 4654 2035 2e30  .....7..MSFT.5.0
	0x0090:  0006 0008 0018 0017 0011 0027            ...........'
2015-06-24 05:40:57.425208 00:0c:29:ad:25:66 > 01:00:5e:7f:ff:fa, ethertype IPv4 (0x0800), length 175: 10.108.16.161.62861 > 239.255.255.250.1900: UDP, length 133
	0x0000:  0100 5e7f fffa 000c 29ad 2566 0800 4500  ..^.....).%f..E.
	0x0010:  00a1 4fe7 0000 0111 5e5e 0a6c 10a1 efff  ..O.....^^.l....
	0x0020:  fffa f58d 076c 008d 50e9 4d2d 5345 4152  .....l..P.M-SEAR
	0x0030:  4348 202a 2048 5454 502f 312e 310d 0a48  CH.*.HTTP/1.1..H
	0x0040:  6f73 743a 3233 392e 3235 352e 3235 352e  ost:239.255.255.
	0x0050:  3235 303a 3139 3030 0d0a 5354 3a75 726e  250:1900..ST:urn
	0x0060:  3a73 6368 656d 6173 2d75 706e 702d 6f72  :schemas-upnp-or
	0x0070:  673a 6465 7669 6365 3a49 6e74 6572 6e65  g:device:Interne
	0x0080:  7447 6174 6577 6179 4465 7669 6365 3a31  tGatewayDevice:1
	0x0090:  0d0a 4d61 6e3a 2273 7364 703a 6469 7363  ..Man:"ssdp:disc
	0x00a0:  6f76 6572 220d 0a4d 583a 330d 0a0d 0a    over"..MX:3....
2015-06-24 05:40:57.432846 00:0c:29:48:29:e3 > 33:33:00:00:00:0c, ethertype IPv6 (0x86dd), length 208: fe80::18f:aba6:cdc7:e96b.64105 > ff02::c.1900: UDP, length 146
	0x0000:  3333 0000 000c 000c 2948 29e3 86dd 6000  33......)H)...`.
	0x0010:  0000 009a 1101 fe80 0000 0000 0000 018f  ................
	0x0020:  aba6 cdc7 e96b ff02 0000 0000 0000 0000  .....k..........
	0x0030:  0000 0000 000c fa69 076c 009a 388c 4d2d  .......i.l..8.M-
	0x0040:  5345 4152 4348 202a 2048 5454 502f 312e  SEARCH.*.HTTP/1.
	0x0050:  310d 0a48 6f73 743a 5b46 4630 323a 3a43  1..Host:[FF02::C
	0x0060:  5d3a 3139 3030 0d0a 5354 3a75 726e 3a4d  ]:1900..ST:urn:M
	0x0070:  6963 726f 736f 6674 2057 696e 646f 7773  icrosoft.Windows
	0x0080:  2050 6565 7220 4e61 6d65 2052 6573 6f6c  .Peer.Name.Resol
	0x0090:  7574 696f 6e20 5072 6f74 6f63 6f6c 3a20  ution.Protocol:.
	0x00a0:  5634 3a49 5056 363a 4c69 6e6b 4c6f 6361  V4:IPV6:LinkLoca
	0x00b0:  6c0d 0a4d 616e 3a22 7373 6470 3a64 6973  l..Man:"ssdp:dis
	0x00c0:  636f 7665 7222 0d0a 4d58 3a33 0d0a 0d0a  cover"..MX:3....
2015-06-24 05:40:57.689154 00:0c:29:ad:25:66 > 33:33:00:00:00:0c, ethertype IPv6 (0x86dd), length 208: fe80::99a:fd71:1187:5248.62859 > ff02::c.1900: UDP, length 146
	0x0000:  3333 0000 000c 000c 29ad 2566 86dd 6000  33......).%f..`.
	0x0010:  0000 009a 1101 fe80 0000 0000 0000 099a  ................
	0x0020:  fd71 1187 5248 ff02 0000 0000 0000 0000  .q..RH..........
	0x0030:  0000 0000 000c f58b 076c 009a 36f8 4d2d  .........l..6.M-
	0x0040:  5345 4152 4348 202a 2048 5454 502f 312e  SEARCH.*.HTTP/1.
	0x0050:  310d 0a48 6f73 743a 5b46 4630 323a 3a43  1..Host:[FF02::C
	0x0060:  5d3a 3139 3030 0d0a 5354 3a75 726e 3a4d  ]:1900..ST:urn:M
	0x0070:  6963 726f 736f 6674 2057 696e 646f 7773  icrosoft.Windows
	0x0080:  2050 6565 7220 4e61 6d65 2052 6573 6f6c  .Peer.Name.Resol
	0x0090:  7574 696f 6e20 5072 6f74 6f63 6f6c 3a20  ution.Protocol:.
	0x00a0:  5634 3a49 5056 363a 4c69 6e6b 4c6f 6361  V4:IPV6:LinkLoca
	0x00b0:  6c0d 0a4d 616e 3a22 7373 6470 3a64 6973  l..Man:"ssdp:dis
	0x00c0:  636f 7665 7222 0d0a 4d58 3a33 0d0a 0d0a  cover"..MX:3....
2015-06-24 05:40:57.748936 08:5b:0e:a0:e2:3a > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.17.97 tell 10.108.17.129, length 46
	0x0000:  ffff ffff ffff 085b 0ea0 e23a 0806 0001  .......[...:....
	0x0010:  0800 0604 0001 085b 0ea0 e23a 0a6c 1181  .......[...:.l..
	0x0020:  0000 0000 0000 0a6c 1161 0000 0000 0000  .......l.a......
	0x0030:  0000 0000 0000 0000 0000 0000            ............
2015-06-24 05:40:58.114070 00:0c:29:13:c0:cf > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.17.254 tell 10.108.16.121, length 46
	0x0000:  ffff ffff ffff 000c 2913 c0cf 0806 0001  ........).......
	0x0010:  0800 0604 0001 000c 2913 c0cf 0a6c 1079  ........)....l.y
	0x0020:  0000 0000 0000 0a6c 11fe 0000 0000 0000  .......l........
	0x0030:  0000 0000 0000 0000 0000 0000            ............
2015-06-24 05:40:58.603964 00:0c:29:07:7a:ea > 01:00:5e:7f:ff:fa, ethertype IPv4 (0x0800), length 175: 10.108.16.215.57761 > 239.255.255.250.1900: UDP, length 133
	0x0000:  0100 5e7f fffa 000c 2907 7aea 0800 4500  ..^.....).z...E.
	0x0010:  00a1 798b 0000 0111 3484 0a6c 10d7 efff  ..y.....4..l....
	0x0020:  fffa e1a1 076c 008d 649f 4d2d 5345 4152  .....l..d.M-SEAR
	0x0030:  4348 202a 2048 5454 502f 312e 310d 0a48  CH.*.HTTP/1.1..H
	0x0040:  6f73 743a 3233 392e 3235 352e 3235 352e  ost:239.255.255.
	0x0050:  3235 303a 3139 3030 0d0a 5354 3a75 726e  250:1900..ST:urn
	0x0060:  3a73 6368 656d 6173 2d75 706e 702d 6f72  :schemas-upnp-or
	0x0070:  673a 6465 7669 6365 3a49 6e74 6572 6e65  g:device:Interne
	0x0080:  7447 6174 6577 6179 4465 7669 6365 3a31  tGatewayDevice:1
	0x0090:  0d0a 4d61 6e3a 2273 7364 703a 6469 7363  ..Man:"ssdp:disc
	0x00a0:  6f76 6572 220d 0a4d 583a 330d 0a0d 0a    over"..MX:3....
2015-06-24 05:40:58.748774 08:5b:0e:a0:e2:3a > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.17.97 tell 10.108.17.129, length 46
	0x0000:  ffff ffff ffff 085b 0ea0 e23a 0806 0001  .......[...:....
	0x0010:  0800 0604 0001 085b 0ea0 e23a 0a6c 1181  .......[...:.l..
	0x0020:  0000 0000 0000 0a6c 1161 0000 0000 0000  .......l.a......
	0x0030:  0000 0000 0000 0000 0000 0000            ............
2015-06-24 05:40:58.769586 00:0c:29:87:5a:1c > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 243: 10.108.18.34.138 > 10.108.19.255.138: NBT UDP PACKET(138)
	0x0000:  ffff ffff ffff 000c 2987 5a1c 0800 4500  ........).Z...E.
	0x0010:  00e5 3a70 0000 8011 c49f 0a6c 1222 0a6c  ..:p.......l.".l
	0x0020:  13ff 008a 008a 00d1 3460 1102 fb0c 0a6c  ........4`.....l
	0x0030:  1222 008a 00bb 0000 2046 4145 4646 4545  .".......FAEFFEE
	0x0040:  4646 4346 4445 4645 4f43 4e45 4e45 4645  FFCFDEFEOCNENEFE
	0x0050:  4a44 4144 4643 4143 4100 2046 4546 4345  JDADFCACA..FEFCE
	0x0060:  4a43 4143 4143 4143 4143 4143 4143 4143  JCACACACACACACAC
	0x0070:  4143 4143 4143 4143 4142 4e00 ff53 4d42  ACACACACABN..SMB
	0x0080:  2500 0000 0000 0000 0000 0000 0000 0000  %...............
	0x0090:  0000 0000 0000 0000 0000 0000 1100 0021  ...............!
	0x00a0:  0000 0000 0000 0000 00e8 0300 0000 0000  ................
	0x00b0:  0000 0021 0056 0003 0001 0000 0002 0032  ...!.V.........2
	0x00c0:  005c 4d41 494c 534c 4f54 5c42 524f 5753  .\MAILSLOT\BROWS
	0x00d0:  4500 0100 80fc 0a00 5045 5445 5253 454e  E.......PETERSEN
	0x00e0:  2d4d 4549 3035 0000 0603 2b10 8000 0f01  -MEI05....+.....
	0x00f0:  55aa 00                                  U..
2015-06-24 05:40:58.770484 00:0c:29:9d:3d:b1 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 92: 10.108.16.217.137 > 10.108.19.255.137: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
	0x0000:  ffff ffff ffff 000c 299d 3db1 0800 4500  ........).=...E.
	0x0010:  004e ae31 4000 4011 52be 0a6c 10d9 0a6c  .N.1@.@.R..l...l
	0x0020:  13ff 0089 0089 003a fb9f 469c 0110 0001  .......:..F.....
	0x0030:  0000 0000 0000 2046 4845 5046 4345 4c45  .......FHEPFCELE
	0x0040:  4846 4345 5046 4646 4143 4143 4143 4143  HFCEPFFFACACACAC
	0x0050:  4143 4143 4142 4e00 0020 0001            ACACABN.....
2015-06-24 05:40:59.655703 94:de:80:61:a4:04 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.18.77 tell 10.108.17.106, length 46
	0x0000:  ffff ffff ffff 94de 8061 a404 0806 0001  .........a......
	0x0010:  0800 0604 0001 94de 8061 a404 0a6c 116a  .........a...l.j
	0x0020:  0000 0000 0000 0a6c 124d 0000 0000 0000  .......l.M......
	0x0030:  0000 0000 0000 0000 0000 0000            ............
2015-06-24 05:40:59.701064 00:0c:29:ad:25:66 > 33:33:00:01:00:02, ethertype IPv6 (0x86dd), length 156: fe80::99a:fd71:1187:5248.546 > ff02::1:2.547: dhcp6 solicit
	0x0000:  3333 0001 0002 000c 29ad 2566 86dd 6000  33......).%f..`.
	0x0010:  0000 0066 1101 fe80 0000 0000 0000 099a  ...f............
	0x0020:  fd71 1187 5248 ff02 0000 0000 0000 0000  .q..RH..........
	0x0030:  0000 0001 0002 0222 0223 0066 61bd 010f  .......".#.fa...
	0x0040:  d3cb 0008 0002 05dc 0001 000e 0001 0001  ................
	0x0050:  18af 44fd 000c 2951 3fd3 0003 000c 1d00  ..D...)Q?.......
	0x0060:  0c29 0000 0000 0000 0000 0027 0010 000e  .).........'....
	0x0070:  7065 7465 7273 656e 2d6d 6569 3230 0010  petersen-mei20..
	0x0080:  000e 0000 0137 0008 4d53 4654 2035 2e30  .....7..MSFT.5.0
	0x0090:  0006 0008 0018 0017 0011 0027            ...........'
2015-06-24 05:41:00.434404 00:0c:29:ad:25:66 > 01:00:5e:7f:ff:fa, ethertype IPv4 (0x0800), length 175: 10.108.16.161.62861 > 239.255.255.250.1900: UDP, length 133
	0x0000:  0100 5e7f fffa 000c 29ad 2566 0800 4500  ..^.....).%f..E.
	0x0010:  00a1 4fe8 0000 0111 5e5d 0a6c 10a1 efff  ..O.....^].l....
	0x0020:  fffa f58d 076c 008d 50e9 4d2d 5345 4152  .....l..P.M-SEAR
	0x0030:  4348 202a 2048 5454 502f 312e 310d 0a48  CH.*.HTTP/1.1..H
	0x0040:  6f73 743a 3233 392e 3235 352e 3235 352e  ost:239.255.255.
	0x0050:  3235 303a 3139 3030 0d0a 5354 3a75 726e  250:1900..ST:urn
	0x0060:  3a73 6368 656d 6173 2d75 706e 702d 6f72  :schemas-upnp-or
	0x0070:  673a 6465 7669 6365 3a49 6e74 6572 6e65  g:device:Interne
	0x0080:  7447 6174 6577 6179 4465 7669 6365 3a31  tGatewayDevice:1
	0x0090:  0d0a 4d61 6e3a 2273 7364 703a 6469 7363  ..Man:"ssdp:disc
	0x00a0:  6f76 6572 220d 0a4d 583a 330d 0a0d 0a    over"..MX:3....
2015-06-24 05:41:00.441706 00:0c:29:48:29:e3 > 33:33:00:00:00:0c, ethertype IPv6 (0x86dd), length 208: fe80::18f:aba6:cdc7:e96b.64105 > ff02::c.1900: UDP, length 146
	0x0000:  3333 0000 000c 000c 2948 29e3 86dd 6000  33......)H)...`.
	0x0010:  0000 009a 1101 fe80 0000 0000 0000 018f  ................
	0x0020:  aba6 cdc7 e96b ff02 0000 0000 0000 0000  .....k..........
	0x0030:  0000 0000 000c fa69 076c 009a 388c 4d2d  .......i.l..8.M-
	0x0040:  5345 4152 4348 202a 2048 5454 502f 312e  SEARCH.*.HTTP/1.
	0x0050:  310d 0a48 6f73 743a 5b46 4630 323a 3a43  1..Host:[FF02::C
	0x0060:  5d3a 3139 3030 0d0a 5354 3a75 726e 3a4d  ]:1900..ST:urn:M
	0x0070:  6963 726f 736f 6674 2057 696e 646f 7773  icrosoft.Windows
	0x0080:  2050 6565 7220 4e61 6d65 2052 6573 6f6c  .Peer.Name.Resol
	0x0090:  7574 696f 6e20 5072 6f74 6f63 6f6c 3a20  ution.Protocol:.
	0x00a0:  5634 3a49 5056 363a 4c69 6e6b 4c6f 6361  V4:IPV6:LinkLoca
	0x00b0:  6c0d 0a4d 616e 3a22 7373 6470 3a64 6973  l..Man:"ssdp:dis
	0x00c0:  636f 7665 7222 0d0a 4d58 3a33 0d0a 0d0a  cover"..MX:3....
2015-06-24 05:41:00.655544 94:de:80:61:a4:04 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.18.77 tell 10.108.17.106, length 46
	0x0000:  ffff ffff ffff 94de 8061 a404 0806 0001  .........a......
	0x0010:  0800 0604 0001 94de 8061 a404 0a6c 116a  .........a...l.j
	0x0020:  0000 0000 0000 0a6c 124d 0000 0000 0000  .......l.M......
	0x0030:  0000 0000 0000 0000 0000 0000            ............
2015-06-24 05:41:01.037458 00:0c:29:42:41:e2 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.17.254 tell 10.108.16.125, length 46
	0x0000:  ffff ffff ffff 000c 2942 41e2 0806 0001  ........)BA.....
	0x0010:  0800 0604 0001 000c 2942 41e2 0a6c 107d  ........)BA..l.}
	0x0020:  0000 0000 0000 0a6c 11fe 0000 0000 0000  .......l........
	0x0030:  0000 0000 0000 0000 0000 0000            ............
2015-06-24 05:41:01.167211 00:0c:29:44:34:87 > 33:33:00:01:00:02, ethertype IPv6 (0x86dd), length 156: fe80::80d2:e13d:c5ce:c480.546 > ff02::1:2.547: dhcp6 solicit
	0x0000:  3333 0001 0002 000c 2944 3487 86dd 6000  33......)D4...`.
	0x0010:  0000 0066 1101 fe80 0000 0000 0000 80d2  ...f............
	0x0020:  e13d c5ce c480 ff02 0000 0000 0000 0000  .=..............
	0x0030:  0000 0001 0002 0222 0223 0066 9740 01aa  .......".#.f.@..
	0x0040:  2642 0008 0002 02bc 0001 000e 0001 0001  &B..............
	0x0050:  18af 44fd 000c 2951 3fd3 0003 000c 1700  ..D...)Q?.......
	0x0060:  0c29 0000 0000 0000 0000 0027 0010 000e  .).........'....
	0x0070:  7065 7465 7273 656e 2d6d 6569 3137 0010  petersen-mei17..
	0x0080:  000e 0000 0137 0008 4d53 4654 2035 2e30  .....7..MSFT.5.0
	0x0090:  0006 0008 0018 0017 0011 0027            ...........'
2015-06-24 05:41:01.481534 00:0c:29:13:c0:cf > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.17.254 tell 10.108.16.121, length 46
	0x0000:  ffff ffff ffff 000c 2913 c0cf 0806 0001  ........).......
	0x0010:  0800 0604 0001 000c 2913 c0cf 0a6c 1079  ........)....l.y
	0x0020:  0000 0000 0000 0a6c 11fe 0000 0000 0000  .......l........
	0x0030:  0000 0000 0000 0000 0000 0000            ............
2015-06-24 05:41:01.612506 00:0c:29:07:7a:ea > 01:00:5e:7f:ff:fa, ethertype IPv4 (0x0800), length 175: 10.108.16.215.57761 > 239.255.255.250.1900: UDP, length 133
	0x0000:  0100 5e7f fffa 000c 2907 7aea 0800 4500  ..^.....).z...E.
	0x0010:  00a1 798c 0000 0111 3483 0a6c 10d7 efff  ..y.....4..l....
	0x0020:  fffa e1a1 076c 008d 649f 4d2d 5345 4152  .....l..d.M-SEAR
	0x0030:  4348 202a 2048 5454 502f 312e 310d 0a48  CH.*.HTTP/1.1..H
	0x0040:  6f73 743a 3233 392e 3235 352e 3235 352e  ost:239.255.255.
	0x0050:  3235 303a 3139 3030 0d0a 5354 3a75 726e  250:1900..ST:urn
	0x0060:  3a73 6368 656d 6173 2d75 706e 702d 6f72  :schemas-upnp-or
	0x0070:  673a 6465 7669 6365 3a49 6e74 6572 6e65  g:device:Interne
	0x0080:  7447 6174 6577 6179 4465 7669 6365 3a31  tGatewayDevice:1
	0x0090:  0d0a 4d61 6e3a 2273 7364 703a 6469 7363  ..Man:"ssdp:disc
	0x00a0:  6f76 6572 220d 0a4d 583a 330d 0a0d 0a    over"..MX:3....
2015-06-24 05:41:01.655394 94:de:80:61:a4:04 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.18.77 tell 10.108.17.106, length 46
	0x0000:  ffff ffff ffff 94de 8061 a404 0806 0001  .........a......
	0x0010:  0800 0604 0001 94de 8061 a404 0a6c 116a  .........a...l.j
	0x0020:  0000 0000 0000 0a6c 124d 0000 0000 0000  .......l.M......
	0x0030:  0000 0000 0000 0000 0000 0000            ............
2015-06-24 05:41:01.682298 00:0c:29:ad:25:66 > 33:33:00:00:00:0c, ethertype IPv6 (0x86dd), length 208: fe80::99a:fd71:1187:5248.62859 > ff02::c.1900: UDP, length 146
	0x0000:  3333 0000 000c 000c 29ad 2566 86dd 6000  33......).%f..`.
	0x0010:  0000 009a 1101 fe80 0000 0000 0000 099a  ................
	0x0020:  fd71 1187 5248 ff02 0000 0000 0000 0000  .q..RH..........
	0x0030:  0000 0000 000c f58b 076c 009a 36f8 4d2d  .........l..6.M-
	0x0040:  5345 4152 4348 202a 2048 5454 502f 312e  SEARCH.*.HTTP/1.
	0x0050:  310d 0a48 6f73 743a 5b46 4630 323a 3a43  1..Host:[FF02::C
	0x0060:  5d3a 3139 3030 0d0a 5354 3a75 726e 3a4d  ]:1900..ST:urn:M
	0x0070:  6963 726f 736f 6674 2057 696e 646f 7773  icrosoft.Windows
	0x0080:  2050 6565 7220 4e61 6d65 2052 6573 6f6c  .Peer.Name.Resol
	0x0090:  7574 696f 6e20 5072 6f74 6f63 6f6c 3a20  ution.Protocol:.
	0x00a0:  5634 3a49 5056 363a 4c69 6e6b 4c6f 6361  V4:IPV6:LinkLoca
	0x00b0:  6c0d 0a4d 616e 3a22 7373 6470 3a64 6973  l..Man:"ssdp:dis
	0x00c0:  636f 7665 7222 0d0a 4d58 3a33 0d0a 0d0a  cover"..MX:3....
2015-06-24 05:41:01.720669 00:0c:29:48:29:e3 > 33:33:00:01:00:02, ethertype IPv6 (0x86dd), length 153: fe80::18f:aba6:cdc7:e96b.546 > ff02::1:2.547: dhcp6 solicit
	0x0000:  3333 0001 0002 000c 2948 29e3 86dd 6000  33......)H)...`.
	0x0010:  0000 0063 1101 fe80 0000 0000 0000 018f  ...c............
	0x0020:  aba6 cdc7 e96b ff02 0000 0000 0000 0000  .....k..........
	0x0030:  0000 0001 0002 0222 0223 0063 0571 0155  .......".#.c.q.U
	0x0040:  753f 0008 0002 189c 0001 000e 0001 0001  u?..............
	0x0050:  18af 81e8 000c 2948 29d9 0003 000c 1300  ......)H).......
	0x0060:  0c29 0000 0000 0000 0000 0027 000d 000b  .).........'....
	0x0070:  666f 7274 696e 6574 2d50 4300 1000 0e00  fortinet-PC.....
	0x0080:  0001 3700 084d 5346 5420 352e 3000 0600  ..7..MSFT.5.0...
	0x0090:  0800 1800 1700 1100 27                   ........'
^C
26 packets captured
26 packets received by filter
0 packets dropped by kernel
> ^DConnection to 10.108.17.49 closed.

]0;oho@chaos: ~/miniprojects/sniftranoho@chaos:~/miniprojects/sniftran$ exit

Script done on Wed 24 Jun 2015 02:41:03 PM CEST
