FG600C3913802320 (root) # diag snif pack any "port not 22" 6

interfaces=[any]
filters=[port not 22]
1.138754 wan1 in 169.254.196.128.62994 -> 239.255.255.250.1900: udp 133
0x0000	 0100 0000 0000 000c 2944 3487 0800 4500	........)D4...E.
0x0010	 00a1 03f9 0000 0111 56da a9fe c480 efff	........V.......
0x0020	 fffa f612 076c 008d fcf1 4d2d 5345 4152	.....l....M-SEAR
0x0030	 4348 202a 2048 5454 502f 312e 310d 0a48	CH.*.HTTP/1.1..H
0x0040	 6f73 743a 3233 392e 3235 352e 3235 352e	ost:239.255.255.
0x0050	 3235 303a 3139 3030 0d0a 5354 3a75 726e	250:1900..ST:urn
0x0060	 3a73 6368 656d 6173 2d75 706e 702d 6f72	:schemas-upnp-or
0x0070	 673a 6465 7669 6365 3a49 6e74 6572 6e65	g:device:Interne
0x0080	 7447 6174 6577 6179 4465 7669 6365 3a31	tGatewayDevice:1
0x0090	 0d0a 4d61 6e3a 2273 7364 703a 6469 7363	..Man:"ssdp:disc
0x00a0	 6f76 6572 220d 0a4d 583a 330d 0a0d 0a  	over"..MX:3....

1.192828 wan1 in arp who-has 10.108.17.254 tell 10.108.16.121
0x0000	 ffff ffff ffff 000c 2913 c0cf 0806 0001	........).......
0x0010	 0800 0604 0001 000c 2913 c0cf 0a6c 1079	........)....l.y
0x0020	 0000 0000 0000 0a6c 11fe 0000 0000 0000	.......l........
0x0030	 0000 0000 0000 0000 0000 0000          	............

1.490242 wan1 in 10.108.16.161.62861 -> 239.255.255.250.1900: udp 133
0x0000	 0100 0000 0000 000c 29ad 2566 0800 4500	........).%f..E.
0x0010	 00a1 550e 0000 0111 5937 0a6c 10a1 efff	..U.....Y7.l....
0x0020	 fffa f58d 076c 008d 50e9 4d2d 5345 4152	.....l..P.M-SEAR
0x0030	 4348 202a 2048 5454 502f 312e 310d 0a48	CH.*.HTTP/1.1..H
0x0040	 6f73 743a 3233 392e 3235 352e 3235 352e	ost:239.255.255.
0x0050	 3235 303a 3139 3030 0d0a 5354 3a75 726e	250:1900..ST:urn
0x0060	 3a73 6368 656d 6173 2d75 706e 702d 6f72	:schemas-upnp-or
0x0070	 673a 6465 7669 6365 3a49 6e74 6572 6e65	g:device:Interne
0x0080	 7447 6174 6577 6179 4465 7669 6365 3a31	tGatewayDevice:1
0x0090	 0d0a 4d61 6e3a 2273 7364 703a 6469 7363	..Man:"ssdp:disc
0x00a0	 6f76 6572 220d 0a4d 583a 330d 0a0d 0a  	over"..MX:3....

1.732343 wan1 in arp who-has 10.108.17.254 tell 10.108.16.125
0x0000	 ffff ffff ffff 000c 2942 41e2 0806 0001	........)BA.....
0x0010	 0800 0604 0001 000c 2942 41e2 0a6c 107d	........)BA..l.}
0x0020	 0000 0000 0000 0a6c 11fe 0000 0000 0000	.......l........
0x0030	 0000 0000 0000 0000 0000 0000          	............

2.223690 wan1 in arp who-has 10.108.18.77 tell 10.108.17.106
0x0000	 ffff ffff ffff 94de 8061 a404 0806 0001	.........a......
0x0010	 0800 0604 0001 94de 8061 a404 0a6c 116a	.........a...l.j
0x0020	 0000 0000 0000 0a6c 124d 0000 0000 0000	.......l.M......
0x0030	 0000 0000 0000 0000 0000 0000          	............

2.374599 wan1 in fe80::18f:aba6:cdc7:e96b.64105 -> ff02::c.1900: udp 146 [hlim 1] (len 154)
0x0000	 0100 0000 0000 000c 2948 29e3 86dd 6000	........)H)...`.
0x0010	 0000 009a 1101 fe80 0000 0000 0000 018f	................
0x0020	 aba6 cdc7 e96b ff02 0000 0000 0000 0000	.....k..........
0x0030	 0000 0000 000c fa69 076c 009a 388c 4d2d	.......i.l..8.M-
0x0040	 5345 4152 4348 202a 2048 5454 502f 312e	SEARCH.*.HTTP/1.
0x0050	 310d 0a48 6f73 743a 5b46 4630 323a 3a43	1..Host:[FF02::C
0x0060	 5d3a 3139 3030 0d0a 5354 3a75 726e 3a4d	]:1900..ST:urn:M
0x0070	 6963 726f 736f 6674 2057 696e 646f 7773	icrosoft.Windows
0x0080	 2050 6565 7220 4e61 6d65 2052 6573 6f6c	.Peer.Name.Resol
0x0090	 7574 696f 6e20 5072 6f74 6f63 6f6c 3a20	ution.Protocol:.
0x00a0	 5634 3a49 5056 363a 4c69 6e6b 4c6f 6361	V4:IPV6:LinkLoca
0x00b0	 6c0d 0a4d 616e 3a22 7373 6470 3a64 6973	l..Man:"ssdp:dis
0x00c0	 636f 7665 7222 0d0a 4d58 3a33 0d0a 0d0a	cover"..MX:3....

2.732228 wan1 in arp who-has 10.108.17.254 tell 10.108.16.125
0x0000	 ffff ffff ffff 000c 2942 41e2 0806 0001	........)BA.....
0x0010	 0800 0604 0001 000c 2942 41e2 0a6c 107d	........)BA..l.}
0x0020	 0000 0000 0000 0a6c 11fe 0000 0000 0000	.......l........
0x0030	 0000 0000 0000 0000 0000 0000          	............

3.223814 wan1 in arp who-has 10.108.18.77 tell 10.108.17.106
0x0000	 ffff ffff ffff 94de 8061 a404 0806 0001	.........a......
0x0010	 0800 0604 0001 94de 8061 a404 0a6c 116a	.........a...l.j
0x0020	 0000 0000 0000 0a6c 124d 0000 0000 0000	.......l.M......
0x0030	 0000 0000 0000 0000 0000 0000          	............

3.231187 wan1 in arp who-has 10.108.17.254 tell 10.108.16.121
0x0000	 ffff ffff ffff 000c 2913 c0cf 0806 0001	........).......
0x0010	 0800 0604 0001 000c 2913 c0cf 0a6c 1079	........)....l.y
0x0020	 0000 0000 0000 0a6c 11fe 0000 0000 0000	.......l........
0x0030	 0000 0000 0000 0000 0000 0000          	............

3.643382 wan1 in fe80::99a:fd71:1187:5248.62859 -> ff02::c.1900: udp 146 [hlim 1] (len 154)
0x0000	 0100 0000 0000 000c 29ad 2566 86dd 6000	........).%f..`.
0x0010	 0000 009a 1101 fe80 0000 0000 0000 099a	................
0x0020	 fd71 1187 5248 ff02 0000 0000 0000 0000	.q..RH..........
0x0030	 0000 0000 000c f58b 076c 009a 36f8 4d2d	.........l..6.M-
0x0040	 5345 4152 4348 202a 2048 5454 502f 312e	SEARCH.*.HTTP/1.
0x0050	 310d 0a48 6f73 743a 5b46 4630 323a 3a43	1..Host:[FF02::C
0x0060	 5d3a 3139 3030 0d0a 5354 3a75 726e 3a4d	]:1900..ST:urn:M
0x0070	 6963 726f 736f 6674 2057 696e 646f 7773	icrosoft.Windows
0x0080	 2050 6565 7220 4e61 6d65 2052 6573 6f6c	.Peer.Name.Resol
0x0090	 7574 696f 6e20 5072 6f74 6f63 6f6c 3a20	ution.Protocol:.
0x00a0	 5634 3a49 5056 363a 4c69 6e6b 4c6f 6361	V4:IPV6:LinkLoca
0x00b0	 6c0d 0a4d 616e 3a22 7373 6470 3a64 6973	l..Man:"ssdp:dis
0x00c0	 636f 7665 7222 0d0a 4d58 3a33 0d0a 0d0a	cover"..MX:3....

4.181913 wan1 in 169.254.196.128.62994 -> 239.255.255.250.1900: udp 133
0x0000	 0100 0000 0000 000c 2944 3487 0800 4500	........)D4...E.
0x0010	 00a1 03fa 0000 0111 56d9 a9fe c480 efff	........V.......
0x0020	 fffa f612 076c 008d fcf1 4d2d 5345 4152	.....l....M-SEAR
0x0030	 4348 202a 2048 5454 502f 312e 310d 0a48	CH.*.HTTP/1.1..H
0x0040	 6f73 743a 3233 392e 3235 352e 3235 352e	ost:239.255.255.
0x0050	 3235 303a 3139 3030 0d0a 5354 3a75 726e	250:1900..ST:urn
0x0060	 3a73 6368 656d 6173 2d75 706e 702d 6f72	:schemas-upnp-or
0x0070	 673a 6465 7669 6365 3a49 6e74 6572 6e65	g:device:Interne
0x0080	 7447 6174 6577 6179 4465 7669 6365 3a31	tGatewayDevice:1
0x0090	 0d0a 4d61 6e3a 2273 7364 703a 6469 7363	..Man:"ssdp:disc
0x00a0	 6f76 6572 220d 0a4d 583a 330d 0a0d 0a  	over"..MX:3....

4.224190 wan1 in arp who-has 10.108.18.77 tell 10.108.17.106
0x0000	 ffff ffff ffff 94de 8061 a404 0806 0001	.........a......
0x0010	 0800 0604 0001 94de 8061 a404 0a6c 116a	.........a...l.j
0x0020	 0000 0000 0000 0a6c 124d 0000 0000 0000	.......l.M......
0x0030	 0000 0000 0000 0000 0000 0000          	............

4.227630 wan1 in arp who-has 10.108.17.254 tell 10.108.16.121
0x0000	 ffff ffff ffff 000c 2913 c0cf 0806 0001	........).......
0x0010	 0800 0604 0001 000c 2913 c0cf 0a6c 1079	........)....l.y
0x0020	 0000 0000 0000 0a6c 11fe 0000 0000 0000	.......l........
0x0030	 0000 0000 0000 0000 0000 0000          	............

4.501692 wan1 in 10.108.16.161.62861 -> 239.255.255.250.1900: udp 133
0x0000	 0100 0000 0000 000c 29ad 2566 0800 4500	........).%f..E.
0x0010	 00a1 550f 0000 0111 5936 0a6c 10a1 efff	..U.....Y6.l....
0x0020	 fffa f58d 076c 008d 50e9 4d2d 5345 4152	.....l..P.M-SEAR
0x0030	 4348 202a 2048 5454 502f 312e 310d 0a48	CH.*.HTTP/1.1..H
0x0040	 6f73 743a 3233 392e 3235 352e 3235 352e	ost:239.255.255.
0x0050	 3235 303a 3139 3030 0d0a 5354 3a75 726e	250:1900..ST:urn
0x0060	 3a73 6368 656d 6173 2d75 706e 702d 6f72	:schemas-upnp-or
0x0070	 673a 6465 7669 6365 3a49 6e74 6572 6e65	g:device:Interne
0x0080	 7447 6174 6577 6179 4465 7669 6365 3a31	tGatewayDevice:1
0x0090	 0d0a 4d61 6e3a 2273 7364 703a 6469 7363	..Man:"ssdp:disc
0x00a0	 6f76 6572 220d 0a4d 583a 330d 0a0d 0a  	over"..MX:3....

4.680382 wan1 in arp who-has 10.108.17.254 tell 10.108.16.125
0x0000	 ffff ffff ffff 000c 2942 41e2 0806 0001	........)BA.....
0x0010	 0800 0604 0001 000c 2942 41e2 0a6c 107d	........)BA..l.}
0x0020	 0000 0000 0000 0a6c 11fe 0000 0000 0000	.......l........
0x0030	 0000 0000 0000 0000 0000 0000          	............

5.028669 wan1 in 2002:470:59af:18::1 -> ff02::1:ff00:123: [icmp6 sum ok] icmp6: neighbor sol: who has 2002:470:59af:18::123 (len 32, hlim 255)
0x0000	 0100 0000 0000 000c 2907 7aea 86dd 6000	........).z...`.
0x0010	 0000 0020 3aff 2002 0470 59af 0018 0000	....:....pY.....
0x0020	 0000 0000 0001 ff02 0000 0000 0000 0000	................
0x0030	 0001 ff00 0123 8700 d6e7 0000 0000 2002	.....#..........
0x0040	 0470 59af 0018 0000 0000 0000 0123 0101	.pY..........#..
0x0050	 000c 2907 7aea                         	..).z.

5.029652 wan1 in arp who-has 10.108.19.254 tell 10.108.16.215
0x0000	 ffff ffff ffff 000c 2907 7aea 0806 0001	........).z.....
0x0010	 0800 0604 0001 000c 2907 7aea 0a6c 10d7	........).z..l..
0x0020	 0000 0000 0000 0a6c 13fe 0000 0000 0000	.......l........
0x0030	 0000 0000 0000 0000 0000 0000          	............

5.231448 wan1 in arp who-has 10.108.17.254 tell 10.108.16.121
0x0000	 ffff ffff ffff 000c 2913 c0cf 0806 0001	........).......
0x0010	 0800 0604 0001 000c 2913 c0cf 0a6c 1079	........)....l.y
0x0020	 0000 0000 0000 0a6c 11fe 0000 0000 0000	.......l........
0x0030	 0000 0000 0000 0000 0000 0000          	............

5.254798 wan1 in arp who-has 10.108.17.33 tell 10.108.16.133
0x0000	 ffff ffff ffff 000c 29cb 0575 0806 0001	........)..u....
0x0010	 0800 0604 0001 000c 29cb 0575 0a6c 1085	........)..u.l..
0x0020	 0000 0000 0000 0a6c 1121 0000 0000 0000	.......l.!......
0x0030	 0000 0000 0000 0000 0000 0000          	............

5.385806 wan1 in fe80::18f:aba6:cdc7:e96b.64105 -> ff02::c.1900: udp 146 [hlim 1] (len 154)
0x0000	 0100 0000 0000 000c 2948 29e3 86dd 6000	........)H)...`.
0x0010	 0000 009a 1101 fe80 0000 0000 0000 018f	................
0x0020	 aba6 cdc7 e96b ff02 0000 0000 0000 0000	.....k..........
0x0030	 0000 0000 000c fa69 076c 009a 388c 4d2d	.......i.l..8.M-
0x0040	 5345 4152 4348 202a 2048 5454 502f 312e	SEARCH.*.HTTP/1.
0x0050	 310d 0a48 6f73 743a 5b46 4630 323a 3a43	1..Host:[FF02::C
0x0060	 5d3a 3139 3030 0d0a 5354 3a75 726e 3a4d	]:1900..ST:urn:M
0x0070	 6963 726f 736f 6674 2057 696e 646f 7773	icrosoft.Windows
0x0080	 2050 6565 7220 4e61 6d65 2052 6573 6f6c	.Peer.Name.Resol
0x0090	 7574 696f 6e20 5072 6f74 6f63 6f6c 3a20	ution.Protocol:.
0x00a0	 5634 3a49 5056 363a 4c69 6e6b 4c6f 6361	V4:IPV6:LinkLoca
0x00b0	 6c0d 0a4d 616e 3a22 7373 6470 3a64 6973	l..Man:"ssdp:dis
0x00c0	 636f 7665 7222 0d0a 4d58 3a33 0d0a 0d0a	cover"..MX:3....

5.603332 wan1 in 2002:470:59af:18::1 -> ff02::1:ff00:123: [icmp6 sum ok] icmp6: neighbor sol: who has 2002:470:59af:18::123 (len 32, hlim 255)
0x0000	 0100 0000 0000 000c 2907 7aea 86dd 6000	........).z...`.
0x0010	 0000 0020 3aff 2002 0470 59af 0018 0000	....:....pY.....
0x0020	 0000 0000 0001 ff02 0000 0000 0000 0000	................
0x0030	 0001 ff00 0123 8700 d6e7 0000 0000 2002	.....#..........
0x0040	 0470 59af 0018 0000 0000 0000 0123 0101	.pY..........#..
0x0050	 000c 2907 7aea                         	..).z.

5.639221 wan1 in 10.108.16.215.57761 -> 239.255.255.250.1900: udp 133
0x0000	 0100 0000 0000 000c 2907 7aea 0800 4500	........).z...E.
0x0010	 00a1 3bfe 0000 0111 7211 0a6c 10d7 efff	..;.....r..l....
0x0020	 fffa e1a1 076c 008d 649f 4d2d 5345 4152	.....l..d.M-SEAR
0x0030	 4348 202a 2048 5454 502f 312e 310d 0a48	CH.*.HTTP/1.1..H
0x0040	 6f73 743a 3233 392e 3235 352e 3235 352e	ost:239.255.255.
0x0050	 3235 303a 3139 3030 0d0a 5354 3a75 726e	250:1900..ST:urn
0x0060	 3a73 6368 656d 6173 2d75 706e 702d 6f72	:schemas-upnp-or
0x0070	 673a 6465 7669 6365 3a49 6e74 6572 6e65	g:device:Interne
0x0080	 7447 6174 6577 6179 4465 7669 6365 3a31	tGatewayDevice:1
0x0090	 0d0a 4d61 6e3a 2273 7364 703a 6469 7363	..Man:"ssdp:disc
0x00a0	 6f76 6572 220d 0a4d 583a 330d 0a0d 0a  	over"..MX:3....

5.687885 wan1 in arp who-has 10.108.17.254 tell 10.108.16.125
0x0000	 ffff ffff ffff 000c 2942 41e2 0806 0001	........)BA.....
0x0010	 0800 0604 0001 000c 2942 41e2 0a6c 107d	........)BA..l.}
0x0020	 0000 0000 0000 0a6c 11fe 0000 0000 0000	.......l........
0x0030	 0000 0000 0000 0000 0000 0000          	............

5.823563 wan1 in arp who-has 10.108.17.97 tell 10.108.17.129
0x0000	 ffff ffff ffff 085b 0ea0 e23a 0806 0001	.......[...:....
0x0010	 0800 0604 0001 085b 0ea0 e23a 0a6c 1181	.......[...:.l..
0x0020	 0000 0000 0000 0a6c 1161 0000 0000 0000	.......l.a......
0x0030	 0000 0000 0000 0000 0000 0000          	............


24 packets received by filter
0 packets dropped by kernel

FG600C3913802320 (root) # ^Dexit
Connection to 10.108.17.105 closed.

