RootForum Community

Resources for System-Administrators
https://www.rootforum.org/forum/

ARP Dauerfeuer wie die ursache finden und unterbinden?

https://www.rootforum.org/forum/viewtopic.php?t=31231

Page 1 of 1

ARP Dauerfeuer wie die ursache finden und unterbinden?

Posted: 2004-11-21 14:40
by skysurfer1
Hi..

seit gestern mittag feuert mein rootserver über ARP bis jetzt schon fast 2 GB in die landschaft .. woran kann das liegen ? hab debian woody r1 auf dem server ..

kann mir jemand weiterhelfen ?

mfg SkySurfer

Re: ARP Dauerfeuer wie die ursache finden und unterbinden?

Posted: 2004-11-21 19:16
by floschi
lol, und was für Dienste??? Oder sollen wir raten...

Re: ARP Dauerfeuer wie die ursache finden und unterbinden?

Posted: 2004-11-21 19:50
by skysurfer1
hi,

also das läuft alles bei mir

ps aux
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.1 1496 512 ? S 13:23 0:04 init [2]
root 2 0.0 0.0 0 0 ? S 13:23 0:00 [keventd]
root 3 0.0 0.0 0 0 ? SN 13:23 0:01 [ksoftirqd_CPU0]
root 4 0.0 0.0 0 0 ? S 13:23 0:00 [kswapd]
root 5 0.0 0.0 0 0 ? S 13:23 0:00 [bdflush]
root 6 0.0 0.0 0 0 ? S 13:23 0:00 [kupdated]
root 7 0.0 0.0 0 0 ? S 13:23 0:00 [kjournald]
root 187 0.0 0.1 2360 848 ? Ss 13:23 0:00 dhclient -e -pf /var/run/dhclient.eth0.pid -lf /var/run/dhclient.eth0.lea
root 261 0.0 0.1 2240 768 ? Ss 13:23 0:00 /sbin/syslogd
root 265 0.0 0.3 1532 1532 ? SLs 13:23 0:00 /usr/sbin/watchdog
root 269 0.0 0.0 1492 460 ? Ss 13:23 0:00 /sbin/klogd
root 272 0.0 0.3 2864 1720 ? Ss 13:23 0:00 /usr/sbin/named
root 276 0.0 4.1 24104 20984 ? Ss 13:23 0:01 /usr/sbin/spamd -c -m 10 -a -H -d --pidfile=/var/run/spamd.pid
root 279 0.0 0.1 1708 656 ? S 13:23 0:00 /usr/sbin/autolog
clamav 300 0.0 0.1 2568 924 ? Ss 13:23 0:00 /usr/bin/freshclam --daemon --quiet --pid /var/run/clamav/freshclam.pid
root 305 0.0 0.0 1656 456 ? S 13:23 0:00 /usr/sbin/courierlogger -pid=/var/run/courier/authdaemon/pid -start /usr/
root 306 0.0 0.1 2320 616 ? S 13:23 0:00 /usr/lib/courier/authlib/authdaemond.mysql
root 312 0.0 0.1 2464 728 ? S 13:23 0:00 /usr/sbin/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -m
root 315 0.0 0.0 1532 316 ? S 13:23 0:00 /usr/sbin/courierlogger imaplogin
root 317 0.0 0.1 2320 616 ? S 13:23 0:00 /usr/lib/courier/authlib/authdaemond.mysql
root 318 0.0 0.1 2320 616 ? S 13:23 0:00 /usr/lib/courier/authlib/authdaemond.mysql
root 319 0.0 0.1 2320 616 ? S 13:23 0:00 /usr/lib/courier/authlib/authdaemond.mysql
root 320 0.0 0.1 2320 616 ? S 13:23 0:00 /usr/lib/courier/authlib/authdaemond.mysql
root 321 0.0 0.1 2320 616 ? S 13:23 0:00 /usr/lib/courier/authlib/authdaemond.mysql
root 327 0.0 0.1 2220 720 ? Ss 13:23 0:00 /usr/sbin/inetd
root 339 0.0 0.2 2496 1232 ? S 13:23 0:00 /bin/sh /usr/bin/mysqld_safe
mysql 375 0.0 1.2 65256 6280 ? S< 13:23 0:00 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --p
root 376 0.0 0.0 1476 484 ? S 13:23 0:00 logger -p daemon.err -t mysqld_safe -i -t mysqld
mysql 377 0.0 1.2 65256 6280 ? S< 13:23 0:00 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --p
mysql 378 0.0 1.2 65256 6280 ? S< 13:23 0:00 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --p
mysql 379 0.0 1.2 65256 6280 ? S< 13:23 0:00 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --p
qmails 407 0.0 0.0 1516 352 ? S 13:23 0:00 qmail-send
qmaild 408 0.0 0.1 2244 700 ? S 13:23 0:00 /usr/local/bin/tcpserver -H -P -R -u 1001 -g 103 -c 40 -x /etc/tcp.smtp.c
root 409 0.0 0.0 1484 428 ? S 13:23 0:00 /var/qmail/bin/splogger smtpd 3
root 410 0.0 0.1 2244 680 ? S 13:23 0:00 /usr/local/bin/tcpserver -R 0 pop3 /var/qmail/bin/qmail-popup server83246
root 412 0.0 0.4 4000 2204 ? S 13:23 0:00 /usr/bin/perl /usr/sbin/readlog
qmaill 416 0.0 0.0 1484 428 ? S 13:23 0:00 splogger qmail
root 417 0.0 0.0 1484 304 ? S 13:23 0:00 qmail-lspawn ./Mailbox
qmailr 418 0.0 0.0 1480 300 ? S 13:23 0:00 qmail-rspawn
qmailq 419 0.0 0.0 1472 308 ? S 13:23 0:00 qmail-clean
nobody 420 0.0 0.1 1676 648 ? Ss 13:23 0:01 /usr/sbin/scandetd
root 427 0.0 0.2 3712 1504 ? Ss 13:23 0:00 /usr/sbin/sshd
root 443 0.0 0.7 3916 3916 ? SLs 13:23 0:00 /usr/sbin/ntpd -p /var/run/ntpd.pid
root 451 0.0 0.7 3908 3908 ? S 13:23 0:00 /usr/sbin/ntpd -p /var/run/ntpd.pid
nobody 452 0.0 0.4 5204 2412 ? Ss 13:23 0:00 proftpd: (accepting connections)
daemon 458 0.0 0.1 1672 624 ? Ss 13:23 0:00 /usr/sbin/atd
root 461 0.0 0.1 1756 804 ? Ss 13:23 0:00 /usr/sbin/cron
root 469 0.0 1.2 9364 6532 ? Ss 13:23 0:00 /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
root 470 0.0 1.6 149484 8480 ? S 13:23 0:07 /usr/sbin/apache
root 476 0.0 0.0 1484 468 tty1 Ss+ 13:23 0:00 /sbin/getty 38400 tty1
root 477 0.0 0.0 1484 468 tty2 Ss+ 13:23 0:00 /sbin/getty 38400 tty2
root 478 0.0 0.0 1484 468 tty3 Ss+ 13:23 0:00 /sbin/getty 38400 tty3
root 479 0.0 0.0 1484 468 tty4 Ss+ 13:23 0:00 /sbin/getty 38400 tty4
root 480 0.0 0.0 1484 468 tty5 Ss+ 13:23 0:00 /sbin/getty 38400 tty5
root 481 0.0 0.0 1484 468 tty6 Ss+ 13:23 0:00 /sbin/getty 38400 tty6
root 507 0.0 1.9 11428 9692 ? Ss 13:25 0:00 /usr/bin/perl -w /usr/bin/mrtg /etc/mrtg.cfg
ntop 833 0.0 8.0 63672 41000 ? Ss 13:49 0:01 /usr/sbin/ntop -d -L -u ntop -P /var/lib/ntop --skip-version-check -a /va
ntop 839 0.0 8.0 63672 41000 ? S 13:49 0:00 /usr/sbin/ntop -d -L -u ntop -P /var/lib/ntop --skip-version-check -a /va
ntop 840 0.0 8.0 63672 41000 ? S 13:49 0:00 /usr/sbin/ntop -d -L -u ntop -P /var/lib/ntop --skip-version-check -a /va
ntop 841 0.2 8.0 63672 41000 ? S 13:49 0:51 /usr/sbin/ntop -d -L -u ntop -P /var/lib/ntop --skip-version-check -a /va
ntop 842 0.0 8.0 63672 41000 ? S 13:49 0:16 /usr/sbin/ntop -d -L -u ntop -P /var/lib/ntop --skip-version-check -a /va
ntop 843 0.0 8.0 63672 41000 ? S 13:49 0:00 /usr/sbin/ntop -d -L -u ntop -P /var/lib/ntop --skip-version-check -a /va
ntop 845 0.0 8.0 63672 41000 ? S 13:49 0:00 /usr/sbin/ntop -d -L -u ntop -P /var/lib/ntop --skip-version-check -a /va
ntop 846 0.0 8.0 63672 41000 ? S 13:49 0:00 /usr/sbin/ntop -d -L -u ntop -P /var/lib/ntop --skip-version-check -a /va
ntop 847 4.6 8.0 63672 41000 ? S 13:49 16:22 /usr/sbin/ntop -d -L -u ntop -P /var/lib/ntop --skip-version-check -a /va
www-data 3994 0.0 1.6 149484 8492 ? S 19:30 0:00 /usr/sbin/apache
www-data 3995 0.0 1.6 149484 8492 ? S 19:30 0:00 /usr/sbin/apache
www-data 3996 0.0 1.6 149484 8492 ? S 19:30 0:00 /usr/sbin/apache
www-data 3997 0.0 1.6 149484 8492 ? S 19:30 0:00 /usr/sbin/apache
www-data 3998 0.0 1.6 149484 8492 ? S 19:30 0:00 /usr/sbin/apache

Re: ARP Dauerfeuer wie die ursache finden und unterbinden?

Posted: 2004-11-22 00:48
by dodolin
@olfi: Bei ARP gibts keine Dienste. ARP ist Layer 2, Dienste gibts nicht vor Schicht 4.

@OP: Haste mal nen tcpdump Auszug von dem ARP-Traffic (kurz sollte erstmal reichen)? Hast du vielleicht eine falsche Netzmaske eingestellt? In Verbindung mit ntop könnte das vielleicht für solche Phänomene sorgen. Läuft ntop schon immer oder erst seit der ARP-Traffic so hoch ist? Was hast du sonst die letzten Tage am Server verändert? Bist du sicher, dass der hohe Traffic ausschließlich ARP ist?

Re: ARP Dauerfeuer wie die ursache finden und unterbinden?

Posted: 2004-11-22 08:10
by skysurfer1
hi

die falsche netmask könnte höchstens vom provider kommen da der server seine daten per dhcp bekommt. ich hab ntop erst nach dem ansteigen des traffics installiert um zu schaun wo er herkommt ..
hab eigentlich nichts am system geändert ... hab es sogar mit dem image des hosters neu aufgestetzt und der das problem besteht noch immer ... auch im recovery modus verursacht der server traffic wie ich gesehen hab ... kann das dann ein problem des Hosters sein ?

mfg SkySurfer

PS Dump schick ich heut mittag

Re: ARP Dauerfeuer wie die ursache finden und unterbinden?

Posted: 2004-11-22 12:42
by dodolin
Manche Provider senden per DHCP eine Netmask von 255.255.255.255. Nicht alle DHCP-Clients kommen damit zurecht. Kannst du das ausschließen?

Aber wenn das gleiche auch auftritt, wenn du im Rescue-System bist und mit dem jungfräulichen Image des Hosters, dann würde ich in der Tat auf ein Problem des Hosters tippen. Hast du den Support schonmal um Rat gefragt? Solltest du IMHO mal tun...

Re: ARP Dauerfeuer wie die ursache finden und unterbinden?

Posted: 2004-11-22 19:42
by skysurfer1
hm ich denke schon das ich das ausschließen kann ..

hab auch schon mal apt-get upgrade gemacht um eventuelle veraltete versionen zu ersetzen ohne erfolg..

ja hab kontakt mit dem .. der meint aber das würde bei ihm im rahmen liegen ..

Re: ARP Dauerfeuer wie die ursache finden und unterbinden?

Posted: 2004-11-22 21:00
by floschi
@dodolin: jein. Dienste war das falsche Wort, ich meinte Anwendungen. Mir ging es mal so bei KDE (!) Start, d.h. nach einer Anmeldung beim kdm hat der aus irgendwelchen Gründen den DNS mit arps zugemüllt, nur weil er keinen r-DNS hatte... und genau sowas wollte ich abfragen ;)

mal ein tcpdump

Posted: 2004-11-22 21:57
by skysurfer1
21:47:37.562885 IP server8324611632.serverpool.info.serverpool.info.ssh > pD95F7256.dip.t-dialin.net.2873: P 426043286:426043482(196) ack 3595899766 win 15532
21:47:37.564084 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41197+ PTR? 86.114.95.217.in-addr.arpa. (44)
21:47:37.565117 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41197 1/5/6 (311)
21:47:37.565812 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41198+ PTR? 238.14.3.81.in-addr.arpa. (42)
21:47:37.566526 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41198 NXDomain 0/1/0 (114)
21:47:37.576650 arp who-has 83.246.116.89 tell 83.246.116.1
21:47:37.576916 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41199+ PTR? 89.116.246.83.in-addr.arpa. (44)
21:47:37.577674 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41199 NXDomain 0/1/0 (106)
21:47:37.577975 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41200+ PTR? 1.116.246.83.in-addr.arpa. (43)
21:47:37.578835 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41200 NXDomain 0/1/0 (105)
21:47:37.601307 arp who-has 83.246.117.224 tell 83.246.117.1
21:47:37.601544 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41201+ PTR? 224.117.246.83.in-addr.arpa. (45)
21:47:37.602450 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41201 NXDomain 0/1/0 (107)
21:47:37.602693 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41202+ PTR? 1.117.246.83.in-addr.arpa. (43)
21:47:37.603294 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41202 NXDomain 0/1/0 (105)
21:47:37.628928 IP pD95F7256.dip.t-dialin.net.2873 > server8324611632.serverpool.info.serverpool.info.ssh: P 1:53(52) ack 0 win 65431
21:47:37.631756 arp who-has 83.246.117.182 tell 83.246.117.1
21:47:37.631969 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41203+ PTR? 182.117.246.83.in-addr.arpa. (45)
21:47:37.632519 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41203 NXDomain 0/1/0 (107)
21:47:37.635727 arp who-has 83.246.117.241 tell 83.246.117.1
21:47:37.635971 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41204+ PTR? 241.117.246.83.in-addr.arpa. (45)
21:47:37.636583 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41204 NXDomain 0/1/0 (107)
21:47:37.637816 IP pD95F7256.dip.t-dialin.net.2873 > server8324611632.serverpool.info.serverpool.info.ssh: P 53:105(52) ack 196 win 65235
21:47:37.655796 arp who-has 83.246.116.102 tell 83.246.116.1
21:47:37.656106 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41205+ PTR? 102.116.246.83.in-addr.arpa. (45)
21:47:37.656659 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41205 NXDomain 0/1/0 (107)
21:47:37.657010 arp who-has 83.246.117.91 tell 83.246.117.1
21:47:37.657254 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41206+ PTR? 91.117.246.83.in-addr.arpa. (44)
21:47:37.657973 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41206 NXDomain 0/1/0 (106)
21:47:37.661583 arp who-has 83.246.117.253 tell 83.246.117.1
21:47:37.661818 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41207+ PTR? 253.117.246.83.in-addr.arpa. (45)
21:47:37.662918 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41207 NXDomain 0/1/0 (107)
21:47:37.664272 IP server8324611632.serverpool.info.serverpool.info.ssh > pD95F7256.dip.t-dialin.net.2873: . ack 105 win 15532
21:47:37.665760 arp who-has 83.246.116.196 tell 83.246.116.1
21:47:37.666001 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41208+ PTR? 196.116.246.83.in-addr.arpa. (45)
21:47:37.666670 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41208 NXDomain 0/1/0 (107)
21:47:37.675715 arp who-has 83.246.117.215 tell 83.246.117.1
21:47:37.675970 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41209+ PTR? 215.117.246.83.in-addr.arpa. (45)
21:47:37.676671 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41209 NXDomain 0/1/0 (107)
21:47:37.687464 arp who-has 83.246.117.141 tell 83.246.117.1
21:47:37.687667 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41210+ PTR? 141.117.246.83.in-addr.arpa. (45)
21:47:37.688287 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41210 NXDomain 0/1/0 (107)
21:47:37.690072 arp who-has 83.246.117.95 tell 83.246.117.1
21:47:37.690298 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41211+ PTR? 95.117.246.83.in-addr.arpa. (44)
21:47:37.690907 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41211 NXDomain 0/1/0 (106)
21:47:37.699723 arp who-has 83.246.116.151 tell 83.246.116.1
21:47:37.699965 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41212+ PTR? 151.116.246.83.in-addr.arpa. (45)
21:47:37.700661 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41212 1/2/2 (159)
21:47:37.703557 arp who-has 83.246.116.98 tell 83.246.116.1
21:47:37.703798 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41213+ PTR? 98.116.246.83.in-addr.arpa. (44)
21:47:37.705860 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41213 NXDomain* 0/1/0 (129)
21:47:37.716457 arp who-has 83.246.117.83 tell 83.246.117.1
21:47:37.716657 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41214+ PTR? 83.117.246.83.in-addr.arpa. (44)
21:47:37.716853 arp who-has 83.246.116.200 tell 83.246.116.1
21:47:37.717318 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41214 NXDomain 0/1/0 (106)
21:47:37.717618 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41215+ PTR? 200.116.246.83.in-addr.arpa. (45)
21:47:37.718203 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41215 NXDomain 0/1/0 (107)
21:47:37.721278 arp who-has 83.246.117.226 tell 83.246.117.1
21:47:37.721521 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41216+ PTR? 226.117.246.83.in-addr.arpa. (45)
21:47:37.722213 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41216 NXDomain 0/1/0 (107)
21:47:37.797396 arp who-has 83.246.116.141 tell 83.246.116.1
21:47:37.797639 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41217+ PTR? 141.116.246.83.in-addr.arpa. (45)
21:47:37.798225 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41217 NXDomain 0/1/0 (107)
21:47:37.810078 arp who-has 83.246.116.170 tell 83.246.116.1
21:47:37.810316 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41218+ PTR? 170.116.246.83.in-addr.arpa. (45)
21:47:37.811060 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41218 NXDomain 0/1/0 (107)
21:47:37.814926 arp who-has 83.246.117.25 tell 83.246.117.1
21:47:37.815153 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41219+ PTR? 25.117.246.83.in-addr.arpa. (44)
21:47:37.815909 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41219 NXDomain 0/1/0 (106)
21:47:37.861893 arp who-has 83.246.117.204 tell 83.246.117.1
21:47:37.862133 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41220+ PTR? 204.117.246.83.in-addr.arpa. (45)
21:47:37.862721 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41220 NXDomain 0/1/0 (107)
21:47:37.891909 arp who-has 83.246.117.232 tell 83.246.117.1
21:47:37.892149 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41221+ PTR? 232.117.246.83.in-addr.arpa. (45)
21:47:37.893116 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41221 NXDomain 0/1/0 (107)
21:47:37.898034 arp who-has 83.246.117.82 tell 83.246.117.1
21:47:37.898285 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41222+ PTR? 82.117.246.83.in-addr.arpa. (44)
21:47:37.899011 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41222 NXDomain 0/1/0 (106)
21:47:37.905653 arp who-has 83.246.117.92 tell 83.246.117.1
21:47:37.905895 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41223+ PTR? 92.117.246.83.in-addr.arpa. (44)
21:47:37.906582 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41223 NXDomain 0/1/0 (106)
21:47:37.908832 arp who-has 83.246.117.235 tell 83.246.117.1
21:47:37.909068 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41224+ PTR? 235.117.246.83.in-addr.arpa. (45)
21:47:37.911156 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41224 NXDomain* 0/1/0 (130)
21:47:37.918648 arp who-has 83.246.117.71 tell 83.246.117.1
21:47:37.918882 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41225+ PTR? 71.117.246.83.in-addr.arpa. (44)
21:47:37.919517 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41225 NXDomain 0/1/0 (106)
21:47:37.989784 arp who-has 83.246.117.6 tell 83.246.117.1
21:47:37.990019 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41226+ PTR? 6.117.246.83.in-addr.arpa. (43)
21:47:37.991818 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41226 NXDomain* 0/1/0 (128)
21:47:37.992595 arp who-has 83.246.117.22 tell 83.246.117.1
21:47:37.992836 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41227+ PTR? 22.117.246.83.in-addr.arpa. (44)
21:47:37.993452 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41227 NXDomain 0/1/0 (106)
21:47:38.000335 arp who-has 83.246.117.118 tell 83.246.117.1
21:47:38.000568 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41228+ PTR? 118.117.246.83.in-addr.arpa. (45)
21:47:38.001294 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41228 NXDomain 0/1/0 (107)
21:47:38.085201 arp who-has 83.246.117.63 tell 83.246.117.1
21:47:38.085485 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41229+ PTR? 63.117.246.83.in-addr.arpa. (44)
21:47:38.091893 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41229 NXDomain* 0/1/0 (129)
21:47:38.093923 arp who-has 83.246.117.96 tell 83.246.117.1
21:47:38.094155 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41230+ PTR? 96.117.246.83.in-addr.arpa. (44)
21:47:38.094896 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41230 NXDomain 0/1/0 (106)
21:47:38.117560 arp who-has 83.246.116.195 tell 83.246.116.1
21:47:38.117796 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41231+ PTR? 195.116.246.83.in-addr.arpa. (45)
21:47:38.118366 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41231 NXDomain 0/1/0 (107)
21:47:38.159157 arp who-has 83.246.117.199 tell 83.246.117.1
21:47:38.159354 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41232+ PTR? 199.117.246.83.in-addr.arpa. (45)
21:47:38.159990 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41232 NXDomain 0/1/0 (107)
21:47:38.169652 arp who-has 83.246.117.103 tell 83.246.117.1
21:47:38.169894 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41233+ PTR? 103.117.246.83.in-addr.arpa. (45)
21:47:38.170413 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41233 NXDomain 0/1/0 (107)
21:47:38.187740 arp who-has 83.246.117.56 tell 83.246.117.1
21:47:38.187951 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41234+ PTR? 56.117.246.83.in-addr.arpa. (44)
21:47:38.188782 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41234 NXDomain 0/1/0 (106)
21:47:38.203599 arp who-has 83.246.116.7 tell 83.246.116.1
21:47:38.203835 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41235+ PTR? 7.116.246.83.in-addr.arpa. (43)
21:47:38.204618 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41235 NXDomain 0/1/0 (105)
21:47:38.207701 arp who-has 83.246.116.48 tell 83.246.116.1
21:47:38.207935 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41236+ PTR? 155.116.246.83.in-addr.arpa. (45)
21:47:38.208771 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41236 1/2/2 (158)
21:47:38.242444 arp who-has 83.246.116.172 tell 83.246.116.1
21:47:38.242683 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41237+ PTR? 172.116.246.83.in-addr.arpa. (45)
21:47:38.243284 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41237 NXDomain 0/1/0 (107)
21:47:38.252483 arp who-has 83.246.117.49 tell 83.246.117.1
21:47:38.252722 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41238+ PTR? 49.117.246.83.in-addr.arpa. (44)
21:47:38.253469 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41238 NXDomain 0/1/0 (106)
21:47:38.261851 arp who-has 83.246.117.49 tell 83.246.117.1
21:47:38.261969 arp who-has 83.246.117.29 tell 83.246.117.1
21:47:38.262074 arp who-has 83.246.116.235 tell 83.246.116.1
21:47:38.262261 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41239+ PTR? 29.117.246.83.in-addr.arpa. (44)
21:47:38.262251 arp who-has 83.246.116.172 tell 83.246.116.1
21:47:38.262274 arp who-has 83.246.117.69 tell 83.246.117.1
21:47:38.262531 arp who-has 83.246.116.48 tell 83.246.116.1
21:47:38.262568 arp who-has 83.246.116.7 tell 83.246.116.1
21:47:38.262689 arp who-has 83.246.116.244 tell 83.246.116.1
21:47:38.262729 arp who-has 83.246.117.56 tell 83.246.117.1
21:47:38.262757 arp who-has 83.246.116.212 tell 83.246.116.1
21:47:38.262900 arp who-has 83.246.117.57 tell 83.246.117.1
21:47:38.262969 arp who-has 83.246.117.103 tell 83.246.117.1
21:47:38.262996 arp who-has 83.246.116.99 tell 83.246.116.1
21:47:38.263088 arp who-has 83.246.117.199 tell 83.246.117.1
21:47:38.263182 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41239 NXDomain 0/1/0 (106)
21:47:38.263261 arp who-has 83.246.117.229 tell 83.246.117.1
21:47:38.263287 arp who-has 83.246.116.121 tell 83.246.116.1
21:47:38.263577 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41240+ PTR? 235.116.246.83.in-addr.arpa. (45)
21:47:38.263636 arp who-has 83.246.117.123 tell 83.246.117.1
21:47:38.263911 arp who-has 83.246.117.185 tell 83.246.117.1
21:47:38.264041 arp who-has 83.246.116.90 tell 83.246.116.1
21:47:38.264042 arp who-has 83.246.117.34 tell 83.246.117.1
21:47:38.264048 arp who-has 83.246.116.195 tell 83.246.116.1
21:47:38.264135 arp who-has 83.246.116.142 tell 83.246.116.1
21:47:38.264212 arp who-has 83.246.117.250 tell 83.246.117.1
21:47:38.264237 arp who-has 83.246.117.200 tell 83.246.117.1
21:47:38.264434 arp who-has 83.246.117.96 tell 83.246.117.1
21:47:38.264498 arp who-has 83.246.117.63 tell 83.246.117.1
21:47:38.265034 arp who-has 83.246.117.106 tell 83.246.117.1
21:47:38.265069 arp who-has 83.246.117.118 tell 83.246.117.1
21:47:38.265216 arp who-has 83.246.117.79 tell 83.246.117.1
21:47:38.265268 arp who-has 83.246.117.81 tell 83.246.117.1
21:47:38.265297 arp who-has 83.246.117.41 tell 83.246.117.1
21:47:38.265538 arp who-has 83.246.117.231 tell 83.246.117.1
21:47:38.265564 arp who-has 83.246.117.124 tell 83.246.117.1
21:47:38.265716 arp who-has 83.246.117.22 tell 83.246.117.1
21:47:38.265845 arp who-has 83.246.117.161 tell 83.246.117.1
21:47:38.266021 arp who-has 83.246.116.248 tell 83.246.116.1
21:47:38.266048 arp who-has 83.246.116.232 tell 83.246.116.1
21:47:38.266113 arp who-has 83.246.117.6 tell 83.246.117.1
21:47:38.266246 arp who-has 83.246.117.128 tell 83.246.117.1
21:47:38.266273 arp who-has 83.246.117.39 tell 83.246.117.1
21:47:38.266330 arp who-has 83.246.116.199 tell 83.246.116.1
21:47:38.266356 arp who-has 83.246.117.59 tell 83.246.117.1
21:47:38.266900 arp who-has 83.246.117.71 tell 83.246.117.1
21:47:38.266973 arp who-has 83.246.117.235 tell 83.246.117.1
21:47:38.267152 arp who-has 83.246.117.92 tell 83.246.117.1
21:47:38.267224 arp who-has 83.246.117.191 tell 83.246.117.1
21:47:38.267300 arp who-has 83.246.117.82 tell 83.246.117.1
21:47:38.267457 arp who-has 83.246.117.232 tell 83.246.117.1
21:47:38.267590 arp who-has 83.246.116.251 tell 83.246.116.1
21:47:38.268011 arp who-has 83.246.117.204 tell 83.246.117.1
21:47:38.268459 arp who-has 83.246.116.5 tell 83.246.116.1
21:47:38.268537 arp who-has 83.246.117.217 tell 83.246.117.1
21:47:38.268564 arp who-has 83.246.117.138 tell 83.246.117.1
21:47:38.268739 arp who-has 83.246.117.18 tell 83.246.117.1
21:47:38.268822 arp who-has 83.246.117.233 tell 83.246.117.1
21:47:38.268984 arp who-has 83.246.116.117 tell 83.246.116.1
21:47:38.269153 arp who-has 83.246.116.129 tell 83.246.116.1
21:47:38.269259 arp who-has 83.246.117.25 tell 83.246.117.1
21:47:38.269341 arp who-has 83.246.117.33 tell 83.246.117.1
21:47:38.269378 arp who-has 83.246.116.170 tell 83.246.116.1
21:47:38.269404 arp who-has 83.246.116.93 tell 83.246.116.1
21:47:38.269612 arp who-has 83.246.117.117 tell 83.246.117.1
21:47:38.269676 arp who-has 83.246.116.88 tell 83.246.116.1
21:47:38.272933 arp who-has 83.246.116.151 tell 83.246.116.1
21:47:38.273002 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41241+ PTR? 69.117.246.83.in-addr.arpa. (44)
21:47:38.273092 arp who-has 83.246.117.113 tell 83.246.117.1
21:47:38.274111 arp who-has 83.246.117.241 tell 83.246.117.1
21:47:38.274339 arp who-has 83.246.117.182 tell 83.246.117.1
21:47:38.274371 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41242+ PTR? 244.116.246.83.in-addr.arpa. (45)
21:47:38.274456 arp who-has 83.246.117.224 tell 83.246.117.1
21:47:38.275535 arp who-has 83.246.117.230 tell 83.246.117.1
21:47:38.275556 arp who-has 83.246.116.214 tell 83.246.116.1
21:47:38.275664 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41243+ PTR? 212.116.246.83.in-addr.arpa. (45)
21:47:38.276654 arp who-has 83.246.117.30 tell 83.246.117.1
21:47:38.276851 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41244+ PTR? 57.117.246.83.in-addr.arpa. (44)
21:47:38.279329 arp who-has 83.246.117.159 tell 83.246.117.1
21:47:38.279481 arp who-has 83.246.117.21 tell 83.246.117.1
21:47:38.279540 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41245+ PTR? 99.116.246.83.in-addr.arpa. (44)
21:47:38.281445 arp who-has 83.246.116.2 tell 83.246.116.1
21:47:38.281489 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41246+ PTR? 229.117.246.83.in-addr.arpa. (45)
21:47:38.281835 arp who-has 83.246.117.211 tell 83.246.117.1
21:47:38.282703 arp who-has 83.246.116.81 tell 83.246.116.1
21:47:38.282880 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41247+ PTR? 121.116.246.83.in-addr.arpa. (45)
21:47:38.283946 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41248+ PTR? 123.117.246.83.in-addr.arpa. (45)
21:47:38.285749 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41248 NXDomain* 0/1/0 (130)
21:47:38.286071 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41249+ PTR? 185.117.246.83.in-addr.arpa. (45)
21:47:38.286901 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41249 NXDomain 0/1/0 (107)
21:47:38.287169 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41250+ PTR? 90.116.246.83.in-addr.arpa. (44)
21:47:38.287745 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41250 NXDomain 0/1/0 (106)
21:47:38.288023 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41251+ PTR? 34.117.246.83.in-addr.arpa. (44)
21:47:38.288836 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41251 NXDomain 0/1/0 (106)
21:47:38.289157 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41252+ PTR? 142.116.246.83.in-addr.arpa. (45)
21:47:38.290021 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41252 NXDomain 0/1/0 (107)
21:47:38.290354 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41253+ PTR? 250.117.246.83.in-addr.arpa. (45)
21:47:38.291151 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41253 NXDomain 0/1/0 (107)
21:47:38.291475 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41254+ PTR? 200.117.246.83.in-addr.arpa. (45)
21:47:38.292134 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41254 NXDomain 0/1/0 (107)
21:47:38.292468 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41255+ PTR? 106.117.246.83.in-addr.arpa. (45)
21:47:38.293281 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41255 NXDomain 0/1/0 (107)
21:47:38.293601 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41256+ PTR? 79.117.246.83.in-addr.arpa. (44)
21:47:38.294400 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41256 NXDomain 0/1/0 (106)
21:47:38.294720 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41257+ PTR? 81.117.246.83.in-addr.arpa. (44)
21:47:38.295394 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41257 NXDomain 0/1/0 (106)
21:47:38.295710 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41258+ PTR? 41.117.246.83.in-addr.arpa. (44)
21:47:38.296663 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41258 NXDomain 0/1/0 (106)
21:47:38.296991 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41259+ PTR? 231.117.246.83.in-addr.arpa. (45)
21:47:38.297597 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41259 NXDomain 0/1/0 (107)
21:47:38.297924 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41260+ PTR? 124.117.246.83.in-addr.arpa. (45)
21:47:38.298618 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41260 NXDomain 0/1/0 (107)
21:47:38.299055 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41261+ PTR? 161.117.246.83.in-addr.arpa. (45)
21:47:38.299754 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41261 NXDomain 0/1/0 (107)
21:47:38.300074 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41262+ PTR? 248.116.246.83.in-addr.arpa. (45)
21:47:38.300929 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41262 NXDomain 0/1/0 (107)
21:47:38.301195 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41263+ PTR? 232.116.246.83.in-addr.arpa. (45)
21:47:38.303136 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41263 NXDomain* 0/1/0 (130)
21:47:38.303462 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41264+ PTR? 128.117.246.83.in-addr.arpa. (45)
21:47:38.304167 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41264 NXDomain 0/1/0 (107)
21:47:38.304519 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41265+ PTR? 39.117.246.83.in-addr.arpa. (44)
21:47:38.305229 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41265 NXDomain 0/1/0 (106)
21:47:38.305557 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41266+ PTR? 199.116.246.83.in-addr.arpa. (45)
21:47:38.307376 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41266 NXDomain* 0/1/0 (130)
21:47:38.307693 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41267+ PTR? 59.117.246.83.in-addr.arpa. (44)
21:47:38.308308 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41267 NXDomain 0/1/0 (106)
21:47:38.308646 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41268+ PTR? 191.117.246.83.in-addr.arpa. (45)
21:47:38.309287 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41268 NXDomain 0/1/0 (107)
21:47:38.309616 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41269+ PTR? 251.116.246.83.in-addr.arpa. (45)
21:47:38.310177 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41269 NXDomain 0/1/0 (107)
21:47:38.310509 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41270+ PTR? 5.116.246.83.in-addr.arpa. (43)
21:47:38.311219 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41270 NXDomain 0/1/0 (105)
21:47:38.311264 arp who-has 83.246.116.123 tell 83.246.116.1
21:47:38.311583 arp who-has 83.246.117.37 tell 83.246.117.1
21:47:38.311625 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41271+ PTR? 217.117.246.83.in-addr.arpa. (45)
21:47:38.313020 arp who-has 83.246.117.163 tell 83.246.117.1
21:47:38.313335 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41271 NXDomain* 0/1/0 (130)
21:47:38.313635 arp who-has 83.246.116.126 tell 83.246.116.1
21:47:38.313699 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41272+ PTR? 138.117.246.83.in-addr.arpa. (45)
21:47:38.314395 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41272 NXDomain 0/1/0 (107)
21:47:38.314710 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41273+ PTR? 18.117.246.83.in-addr.arpa. (44)
21:47:38.316394 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41273 NXDomain* 0/1/0 (129)
21:47:38.316708 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41274+ PTR? 233.117.246.83.in-addr.arpa. (45)
21:47:38.317294 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41274 NXDomain 0/1/0 (107)
21:47:38.317618 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41275+ PTR? 117.116.246.83.in-addr.arpa. (45)
21:47:38.318223 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41275 NXDomain 0/1/0 (107)
21:47:38.318549 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41276+ PTR? 129.116.246.83.in-addr.arpa. (45)
21:47:38.319166 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41276 NXDomain 0/1/0 (107)
21:47:38.319499 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41277+ PTR? 33.117.246.83.in-addr.arpa. (44)
21:47:38.320204 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41277 NXDomain 0/1/0 (106)
21:47:38.320535 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41278+ PTR? 93.116.246.83.in-addr.arpa. (44)
21:47:38.321276 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41278 NXDomain 0/1/0 (106)
21:47:38.321592 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41279+ PTR? 117.117.246.83.in-addr.arpa. (45)
21:47:38.323021 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41279 NXDomain* 0/1/0 (130)
21:47:38.323331 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41280+ PTR? 88.116.246.83.in-addr.arpa. (44)
21:47:38.324873 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41280 NXDomain 0/1/0 (106)
21:47:38.325239 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41281+ PTR? 113.117.246.83.in-addr.arpa. (45)
21:47:38.325901 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41281 NXDomain 0/1/0 (107)
21:47:38.326287 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41282+ PTR? 230.117.246.83.in-addr.arpa. (45)
21:47:38.327093 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41282 NXDomain 0/1/0 (107)
21:47:38.327424 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41283+ PTR? 214.116.246.83.in-addr.arpa. (45)
21:47:38.328132 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41283 NXDomain 0/1/0 (107)
21:47:38.328476 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41284+ PTR? 30.117.246.83.in-addr.arpa. (44)
21:47:38.334527 arp who-has 83.246.116.191 tell 83.246.116.1
21:47:38.336305 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41284 NXDomain 0/1/0 (106)
21:47:38.336656 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41285+ PTR? 159.117.246.83.in-addr.arpa. (45)
21:47:38.338128 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41285 NXDomain 0/1/0 (107)
21:47:38.338447 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41286+ PTR? 21.117.246.83.in-addr.arpa. (44)
21:47:38.339196 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41286 NXDomain 0/1/0 (106)
21:47:38.339557 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41287+ PTR? 2.116.246.83.in-addr.arpa. (43)
21:47:38.340230 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41287 NXDomain 0/1/0 (105)
21:47:38.340590 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41288+ PTR? 211.117.246.83.in-addr.arpa. (45)
21:47:38.341380 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41288 NXDomain 0/1/0 (107)
21:47:38.341707 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41289+ PTR? 81.116.246.83.in-addr.arpa. (44)
21:47:38.342658 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41289 NXDomain 0/1/0 (106)
21:47:38.342852 arp who-has 83.246.117.94 tell 83.246.117.1
21:47:38.343570 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41290+ PTR? 123.116.246.83.in-addr.arpa. (45)
21:47:38.344272 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41290 NXDomain 0/1/0 (107)
21:47:38.344548 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41291+ PTR? 37.117.246.83.in-addr.arpa. (44)
21:47:38.345696 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41291 NXDomain 0/1/0 (106)
21:47:38.346041 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41292+ PTR? 163.117.246.83.in-addr.arpa. (45)
21:47:38.346602 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41292 NXDomain 0/1/0 (107)
21:47:38.346956 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41293+ PTR? 126.116.246.83.in-addr.arpa. (45)
21:47:38.347865 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41293 NXDomain 0/1/0 (107)
21:47:38.348549 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41294+ PTR? 191.116.246.83.in-addr.arpa. (45)
21:47:38.349249 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41294 NXDomain 0/1/0 (107)
21:47:38.349709 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41295+ PTR? 94.117.246.83.in-addr.arpa. (44)
21:47:38.350500 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41295 NXDomain 0/1/0 (106)
21:47:38.351932 arp who-has 83.246.117.51 tell 83.246.117.1
21:47:38.352185 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41296+ PTR? 51.117.246.83.in-addr.arpa. (44)
21:47:38.352970 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41296 NXDomain 0/1/0 (106)
21:47:38.363346 arp who-has 83.246.116.188 tell 83.246.116.1
21:47:38.363508 arp who-has 83.246.117.111 tell 83.246.117.1
21:47:38.363635 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41297+ PTR? 188.116.246.83.in-addr.arpa. (45)
21:47:38.364197 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41297 NXDomain 0/1/0 (107)
21:47:38.364520 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41298+ PTR? 111.117.246.83.in-addr.arpa. (45)
21:47:38.364865 arp who-has 83.246.117.108 tell 83.246.117.1
21:47:38.365190 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41298 NXDomain 0/1/0 (107)
21:47:38.365492 arp who-has 83.246.117.102 tell 83.246.117.1
21:47:38.365608 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41299+ PTR? 108.117.246.83.in-addr.arpa. (45)
21:47:38.366233 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41299 NXDomain 0/1/0 (107)
21:47:38.366576 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41300+ PTR? 102.117.246.83.in-addr.arpa. (45)
21:47:38.367375 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41300 NXDomain 0/1/0 (107)
21:47:38.382877 arp who-has 83.246.117.248 tell 83.246.117.1
21:47:38.383126 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41301+ PTR? 248.117.246.83.in-addr.arpa. (45)
21:47:38.384828 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41301 NXDomain* 0/1/0 (130)
21:47:38.401329 arp who-has 83.246.116.228 tell 83.246.116.1
21:47:38.401528 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41302+ PTR? 228.116.246.83.in-addr.arpa. (45)
21:47:38.401909 arp who-has 83.246.117.168 tell 83.246.117.1
21:47:38.402151 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41302 NXDomain 0/1/0 (107)
21:47:38.402500 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41303+ PTR? 168.117.246.83.in-addr.arpa. (45)
21:47:38.403448 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41303 NXDomain 0/1/0 (107)
21:47:38.404806 arp who-has 83.246.116.86 tell 83.246.116.1
21:47:38.405054 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41304+ PTR? 86.116.246.83.in-addr.arpa. (44)
21:47:38.405897 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41304 NXDomain 0/1/0 (106)
21:47:38.441086 arp who-has 83.246.117.154 tell 83.246.117.1
21:47:38.441331 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41305+ PTR? 154.117.246.83.in-addr.arpa. (45)
21:47:38.442333 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41305 NXDomain 0/1/0 (107)
21:47:38.450819 arp who-has 83.246.117.66 tell 83.246.117.1
21:47:38.450980 arp who-has 83.246.116.185 tell 83.246.116.1
21:47:38.451093 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41306+ PTR? 66.117.246.83.in-addr.arpa. (44)
21:47:38.451744 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41306 NXDomain 0/1/0 (106)
21:47:38.452064 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41307+ PTR? 185.116.246.83.in-addr.arpa. (45)
21:47:38.452692 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41307 NXDomain 0/1/0 (107)
21:47:38.453343 arp who-has 83.246.116.101 tell 83.246.116.1
21:47:38.453604 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41308+ PTR? 101.116.246.83.in-addr.arpa. (45)
21:47:38.454187 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41308 NXDomain 0/1/0 (107)
21:47:38.495012 arp who-has 83.246.117.207 tell 83.246.117.1
21:47:38.495249 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41309+ PTR? 207.117.246.83.in-addr.arpa. (45)
21:47:38.496168 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41309 NXDomain 0/1/0 (107)
21:47:38.496295 arp who-has 83.246.117.98 tell 83.246.117.1
21:47:38.496592 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41310+ PTR? 98.117.246.83.in-addr.arpa. (44)
21:47:38.497165 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41310 NXDomain 0/1/0 (106)
21:47:38.501990 arp who-has 83.246.117.157 tell 83.246.117.1
21:47:38.502225 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41311+ PTR? 157.117.246.83.in-addr.arpa. (45)
21:47:38.502770 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41311 NXDomain 0/1/0 (107)
21:47:38.510766 arp who-has 83.246.116.173 tell 83.246.116.1
21:47:38.511015 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41312+ PTR? 173.116.246.83.in-addr.arpa. (45)
21:47:38.511853 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41312 NXDomain 0/1/0 (107)
21:47:38.516860 arp who-has 83.246.117.219 tell 83.246.117.1
21:47:38.517095 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41313+ PTR? 219.117.246.83.in-addr.arpa. (45)
21:47:38.518683 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41313 NXDomain* 0/1/0 (130)
21:47:38.539621 arp who-has 83.246.117.2 tell 83.246.117.1
21:47:38.539866 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41314+ PTR? 2.117.246.83.in-addr.arpa. (43)
21:47:38.579796 arp who-has 83.246.117.55 tell 83.246.117.1
21:47:38.596656 arp who-has 83.246.116.201 tell 83.246.116.1
21:47:38.600998 arp who-has 83.246.117.151 tell 83.246.117.1
21:47:38.617954 arp who-has 83.246.116.127 tell 83.246.116.1
21:47:38.628315 arp who-has 83.246.116.250 tell 83.246.116.1
21:47:38.633413 arp who-has 83.246.117.19 tell 83.246.117.1
21:47:38.635225 arp who-has 83.246.116.166 tell 83.246.116.1
21:47:38.636275 arp who-has 83.246.117.181 tell 83.246.117.1
21:47:38.645577 arp who-has 83.246.116.104 tell 83.246.116.1
21:47:38.656648 arp who-has 83.246.117.227 tell 83.246.117.1
21:47:38.667190 arp who-has 83.246.116.192 tell 83.246.116.1
21:47:38.689509 arp who-has 83.246.117.244 tell 83.246.117.1
21:47:38.712623 arp who-has 83.246.117.153 tell 83.246.117.1
21:47:38.739695 arp who-has 83.246.116.218 tell 83.246.116.1
21:47:38.743523 arp who-has 83.246.117.122 tell 83.246.117.1
21:47:38.749070 arp who-has 83.246.117.202 tell 83.246.117.1
21:47:38.756133 arp who-has 83.246.116.186 tell 83.246.116.1
21:47:38.762472 arp who-has 83.246.116.130 tell 83.246.116.1
21:47:38.791301 arp who-has 83.246.116.193 tell 83.246.116.1
21:47:38.807546 arp who-has 83.246.116.94 tell 83.246.116.1
21:47:38.830439 arp who-has 83.246.117.189 tell 83.246.117.1
21:47:38.843253 arp who-has 83.246.116.112 tell 83.246.116.1
21:47:38.851461 arp who-has 83.246.117.76 tell 83.246.117.1
21:47:38.872423 arp who-has 83.246.116.181 tell 83.246.116.1
21:47:38.901999 arp who-has 83.246.116.6 tell 83.246.116.1
21:47:38.909097 arp who-has 83.246.117.236 tell 83.246.117.1
21:47:38.912751 arp who-has 83.246.117.3 tell 83.246.117.1
21:47:38.914255 arp who-has 83.246.117.50 tell 83.246.117.1
21:47:38.927675 arp who-has 83.246.117.109 tell 83.246.117.1
21:47:38.931500 arp who-has 83.246.117.243 tell 83.246.117.1
21:47:38.997844 arp who-has 83.246.117.150 tell 83.246.117.1
21:47:39.004600 arp who-has 83.246.116.194 tell 83.246.116.1
21:47:39.015101 arp who-has 83.246.117.135 tell 83.246.117.1
21:47:39.018975 arp who-has 83.246.117.78 tell 83.246.117.1
21:47:39.032769 arp who-has 83.246.117.249 tell 83.246.117.1
21:47:39.049803 arp who-has 83.246.117.192 tell 83.246.117.1
21:47:39.067999 arp who-has 83.246.117.61 tell 83.246.117.1
21:47:39.073099 arp who-has 83.246.117.140 tell 83.246.117.1
21:47:39.073984 arp who-has 83.246.117.251 tell 83.246.117.1
21:47:39.098463 arp who-has 83.246.116.159 tell 83.246.116.1
21:47:39.098997 arp who-has 83.246.117.36 tell 83.246.117.1
21:47:39.117133 arp who-has 83.246.117.172 tell 83.246.117.1
21:47:39.130314 arp who-has 83.246.116.116 tell 83.246.116.1
21:47:39.139172 arp who-has 83.246.117.88 tell 83.246.117.1
21:47:39.185745 arp who-has 83.246.116.226 tell 83.246.116.1
21:47:39.185910 arp who-has 83.246.117.40 tell 83.246.117.1
21:47:39.189521 arp who-has 83.246.116.147 tell 83.246.116.1
21:47:39.231426 arp who-has 83.246.117.54 tell 83.246.117.1
21:47:39.261880 arp who-has 83.246.117.49 tell 83.246.117.1
21:47:39.262286 arp who-has 83.246.116.172 tell 83.246.116.1
21:47:39.262323 arp who-has 83.246.117.54 tell 83.246.117.1
21:47:39.262540 arp who-has 83.246.116.48 tell 83.246.116.1
21:47:39.262577 arp who-has 83.246.116.7 tell 83.246.116.1
21:47:39.262684 arp who-has 83.246.116.244 tell 83.246.116.1
21:47:39.262711 arp who-has 83.246.117.56 tell 83.246.117.1
21:47:39.262738 arp who-has 83.246.116.212 tell 83.246.116.1
21:47:39.262875 arp who-has 83.246.117.57 tell 83.246.117.1
21:47:39.262930 arp who-has 83.246.117.103 tell 83.246.117.1
21:47:39.262957 arp who-has 83.246.116.99 tell 83.246.116.1
21:47:39.263038 arp who-has 83.246.117.199 tell 83.246.117.1
21:47:39.263273 arp who-has 83.246.116.121 tell 83.246.116.1
21:47:43.543769 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41314+ PTR? 2.117.246.83.in-addr.arpa. (43)
21:47:45.726388 IP server8324611632.serverpool.info.serverpool.info.loc-srv > 37.Red-80-24-224.pooles.rima-tde.net.1088: R 0:0(0) ack 1464219803 win 0
21:47:46.345916 IP server8324611632.serverpool.info.serverpool.info.loc-srv > 37.Red-80-24-224.pooles.rima-tde.net.1088: R 0:0(0) ack 1 win 0
21:47:46.946293 IP server8324611632.serverpool.info.serverpool.info.loc-srv > 37.Red-80-24-224.pooles.rima-tde.net.1088: R 0:0(0) ack 1 win 0
21:47:48.553610 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41315+ PTR? 55.117.246.83.in-addr.arpa. (44)
21:47:48.556157 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41315 NXDomain 0/1/0 (106)
21:47:48.556505 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41316+ PTR? 201.116.246.83.in-addr.arpa. (45)
21:47:48.557747 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41316 NXDomain 0/1/0 (107)
21:47:48.558075 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41317+ PTR? 151.117.246.83.in-addr.arpa. (45)
21:47:48.559061 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41318+ PTR? 127.116.246.83.in-addr.arpa. (45)
21:47:48.561387 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41318 NXDomain* 0/1/0 (130)
21:47:48.561703 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41319+ PTR? 250.116.246.83.in-addr.arpa. (45)
21:47:48.562394 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41319 NXDomain 0/1/0 (107)
21:47:48.562713 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41320+ PTR? 19.117.246.83.in-addr.arpa. (44)
21:47:48.563387 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41320 NXDomain 0/1/0 (106)
21:47:48.563720 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41321+ PTR? 166.116.246.83.in-addr.arpa. (45)
21:47:48.564381 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41321 NXDomain 0/1/0 (107)
21:47:48.564706 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41322+ PTR? 181.117.246.83.in-addr.arpa. (45)
21:47:48.565423 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41322 NXDomain 0/1/0 (107)
21:47:48.565745 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41323+ PTR? 104.116.246.83.in-addr.arpa. (45)
21:47:48.566699 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41324+ PTR? 227.117.246.83.in-addr.arpa. (45)
21:47:48.567399 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41324 NXDomain 0/1/0 (107)
21:47:48.567661 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41325+ PTR? 192.116.246.83.in-addr.arpa. (45)
21:47:48.568355 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41325 NXDomain 0/1/0 (107)
21:47:48.568671 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41326+ PTR? 244.117.246.83.in-addr.arpa. (45)
21:47:48.569344 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41326 NXDomain 0/1/0 (107)
21:47:48.569657 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41327+ PTR? 153.117.246.83.in-addr.arpa. (45)
21:47:48.570599 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41327 NXDomain 0/1/0 (107)
21:47:48.570920 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41328+ PTR? 218.116.246.83.in-addr.arpa. (45)
21:47:48.571688 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41328 NXDomain 0/1/0 (107)
21:47:48.572012 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41329+ PTR? 122.117.246.83.in-addr.arpa. (45)
21:47:48.575578 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41330+ PTR? 202.117.246.83.in-addr.arpa. (45)
21:47:48.576492 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41330 NXDomain 0/1/0 (107)
21:47:48.576812 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41331+ PTR? 186.116.246.83.in-addr.arpa. (45)
21:47:48.577492 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41331 NXDomain 0/1/0 (107)
21:47:48.577821 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41332+ PTR? 130.116.246.83.in-addr.arpa. (45)
21:47:48.578467 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41332 NXDomain 0/1/0 (107)
21:47:48.578794 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41333+ PTR? 193.116.246.83.in-addr.arpa. (45)
21:47:48.579439 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41333 NXDomain 0/1/0 (107)
21:47:48.579755 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41334+ PTR? 94.116.246.83.in-addr.arpa. (44)
21:47:48.580302 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41334 NXDomain 0/1/0 (106)
21:47:48.580611 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41335+ PTR? 189.117.246.83.in-addr.arpa. (45)
21:47:48.581661 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41336+ PTR? 112.116.246.83.in-addr.arpa. (45)
21:47:48.582199 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41336 NXDomain 0/1/0 (107)
21:47:48.582464 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41337+ PTR? 76.117.246.83.in-addr.arpa. (44)
21:47:48.583070 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41337 NXDomain 0/1/0 (106)
21:47:48.583405 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41338+ PTR? 181.116.246.83.in-addr.arpa. (45)
21:47:48.584055 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41338 NXDomain 0/1/0 (107)
21:47:48.584378 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41339+ PTR? 6.116.246.83.in-addr.arpa. (43)
21:47:48.584986 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41339 NXDomain 0/1/0 (105)
21:47:48.585312 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41340+ PTR? 236.117.246.83.in-addr.arpa. (45)
21:47:48.585920 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41340 NXDomain 0/1/0 (107)
21:47:48.586253 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41341+ PTR? 3.117.246.83.in-addr.arpa. (43)
21:47:48.588527 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41342+ PTR? 50.117.246.83.in-addr.arpa. (44)
21:47:48.590429 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41342 NXDomain* 0/1/0 (129)
21:47:48.590876 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41343+ PTR? 109.117.246.83.in-addr.arpa. (45)
21:47:48.591454 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41343 NXDomain 0/1/0 (107)
21:47:48.591790 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41344+ PTR? 243.117.246.83.in-addr.arpa. (45)
21:47:48.591955 arp who-has 83.246.117.217 tell 83.246.117.1
21:47:48.592752 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41345+ PTR? 150.117.246.83.in-addr.arpa. (45)
21:47:48.593931 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41345 NXDomain 0/1/0 (107)
21:47:48.594257 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41346+ PTR? 194.116.246.83.in-addr.arpa. (45)
21:47:48.594905 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41346 NXDomain 0/1/0 (107)
21:47:48.595218 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41347+ PTR? 135.117.246.83.in-addr.arpa. (45)
21:47:48.596125 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41348+ PTR? 78.117.246.83.in-addr.arpa. (44)
21:47:48.597868 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41348 NXDomain* 0/1/0 (129)
21:47:48.598183 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41349+ PTR? 249.117.246.83.in-addr.arpa. (45)
21:47:48.599154 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41349 NXDomain 0/1/0 (107)
21:47:48.599483 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41350+ PTR? 192.117.246.83.in-addr.arpa. (45)
21:47:48.600247 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41350 NXDomain 0/1/0 (107)
21:47:48.600573 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41351+ PTR? 61.117.246.83.in-addr.arpa. (44)
21:47:48.601203 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41351 NXDomain 0/1/0 (106)
21:47:48.601528 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41352+ PTR? 140.117.246.83.in-addr.arpa. (45)
21:47:48.602216 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41352 NXDomain 0/1/0 (107)
21:47:48.602534 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41353+ PTR? 251.117.246.83.in-addr.arpa. (45)
21:47:48.603598 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41354+ PTR? 159.116.246.83.in-addr.arpa. (45)
21:47:48.604531 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41354 NXDomain 0/1/0 (107)
21:47:48.604853 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41355+ PTR? 36.117.246.83.in-addr.arpa. (44)
21:47:48.605499 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41355 NXDomain 0/1/0 (106)
21:47:48.605831 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41356+ PTR? 172.117.246.83.in-addr.arpa. (45)
21:47:48.606339 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41356 NXDomain 0/1/0 (107)
21:47:48.606664 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41357+ PTR? 116.116.246.83.in-addr.arpa. (45)
21:47:48.607578 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41357 NXDomain 0/1/0 (107)
21:47:48.607901 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41358+ PTR? 88.117.246.83.in-addr.arpa. (44)
21:47:48.609125 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41358 NXDomain 0/1/0 (106)
21:47:48.609437 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41359+ PTR? 226.116.246.83.in-addr.arpa. (45)
21:47:48.611547 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41360+ PTR? 40.117.246.83.in-addr.arpa. (44)
21:47:48.612210 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41360 NXDomain 0/1/0 (106)
21:47:48.612526 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41361+ PTR? 147.116.246.83.in-addr.arpa. (45)
21:47:48.613200 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41361 NXDomain 0/1/0 (107)
21:47:48.613553 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41362+ PTR? 54.117.246.83.in-addr.arpa. (44)
21:47:48.614364 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41362 NXDomain 0/1/0 (106)
21:47:48.614828 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41363+ PTR? 37.224.24.80.in-addr.arpa. (43)
21:47:48.615719 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41363 1/2/2 (175)
21:47:48.616593 arp who-has 83.246.117.39 tell 83.246.117.1
21:47:48.633784 arp who-has 83.246.117.212 tell 83.246.117.1
21:47:48.634066 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41364+ PTR? 212.117.246.83.in-addr.arpa. (45)
21:47:48.634818 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41364 NXDomain 0/1/0 (107)
21:47:48.667626 arp who-has 83.246.116.120 tell 83.246.116.1
21:47:48.667829 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41365+ PTR? 120.116.246.83.in-addr.arpa. (45)
21:47:48.668413 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41365 NXDomain 0/1/0 (107)
21:47:48.673987 arp who-has 83.246.116.152 tell 83.246.116.1
21:47:48.674229 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41366+ PTR? 152.116.246.83.in-addr.arpa. (45)
21:47:48.675353 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41366 1/2/2 (159)
21:47:48.679258 arp who-has 83.246.116.213 tell 83.246.116.1
21:47:48.679505 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41367+ PTR? 213.116.246.83.in-addr.arpa. (45)
21:47:48.680146 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41367 NXDomain 0/1/0 (107)
21:47:48.719824 arp who-has 83.246.116.82 tell 83.246.116.1
21:47:48.720086 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41368+ PTR? 82.116.246.83.in-addr.arpa. (44)
21:47:48.720841 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41368 NXDomain 0/1/0 (106)
21:47:48.737654 arp who-has 83.246.117.146 tell 83.246.117.1
21:47:48.737884 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41369+ PTR? 146.117.246.83.in-addr.arpa. (45)
21:47:48.738857 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41369 NXDomain 0/1/0 (107)
21:47:48.750751 arp who-has 83.246.116.225 tell 83.246.116.1
21:47:48.751004 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41370+ PTR? 225.116.246.83.in-addr.arpa. (45)
21:47:48.752682 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41370 NXDomain* 0/1/0 (130)
21:47:48.757169 arp who-has 83.246.117.72 tell 83.246.117.1
21:47:48.757418 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41371+ PTR? 72.117.246.83.in-addr.arpa. (44)
21:47:48.758063 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41371 NXDomain 0/1/0 (106)
21:47:48.806180 arp who-has 83.246.117.189 tell 83.246.117.1
21:47:48.812749 arp who-has 83.246.117.23 tell 83.246.117.1
21:47:48.812984 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41372+ PTR? 23.117.246.83.in-addr.arpa. (44)
21:47:48.813669 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41372 NXDomain 0/1/0 (106)
21:47:48.825545 arp who-has 83.246.117.144 tell 83.246.117.1
21:47:48.825783 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41373+ PTR? 144.117.246.83.in-addr.arpa. (45)
21:47:48.826477 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41373 NXDomain 0/1/0 (107)
21:47:48.846284 arp who-has 83.246.117.250 tell 83.246.117.1
21:47:48.861856 arp who-has 83.246.117.108 tell 83.246.117.1
21:47:48.873890 arp who-has 83.246.116.7 tell 83.246.116.1
21:47:48.911756 arp who-has 83.246.117.193 tell 83.246.117.1
21:47:48.911984 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41374+ PTR? 193.117.246.83.in-addr.arpa. (45)
21:47:48.912594 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41374 NXDomain 0/1/0 (107)
21:47:48.912596 arp who-has 83.246.117.172 tell 83.246.117.1
21:47:48.916034 arp who-has 83.246.116.161 tell 83.246.116.1
21:47:48.916275 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41375+ PTR? 161.116.246.83.in-addr.arpa. (45)
21:47:48.916965 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41375 NXDomain 0/1/0 (107)
21:47:48.943058 arp who-has 83.246.117.74 tell 83.246.117.1
21:47:48.943349 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41376+ PTR? 74.117.246.83.in-addr.arpa. (44)
21:47:48.944067 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41376 NXDomain 0/1/0 (106)
21:47:49.027820 arp who-has 83.246.117.213 tell 83.246.117.1
21:47:49.028101 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41377+ PTR? 213.117.246.83.in-addr.arpa. (45)
21:47:49.029009 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41377 NXDomain 0/1/0 (107)
21:47:49.036471 arp who-has 83.246.117.79 tell 83.246.117.1
21:47:49.065758 arp who-has 83.246.117.105 tell 83.246.117.1
21:47:49.065972 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41378+ PTR? 105.117.246.83.in-addr.arpa. (45)
21:47:49.066806 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41378 NXDomain 0/1/0 (107)
21:47:49.079986 arp who-has 83.246.117.112 tell 83.246.117.1
21:47:49.080197 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41379+ PTR? 112.117.246.83.in-addr.arpa. (45)
21:47:49.080800 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41379 NXDomain 0/1/0 (107)
21:47:49.085863 arp who-has 83.246.116.135 tell 83.246.116.1
21:47:49.086112 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41380+ PTR? 135.116.246.83.in-addr.arpa. (45)
21:47:49.086877 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41380 NXDomain 0/1/0 (107)
21:47:49.089327 arp who-has 83.246.117.113 tell 83.246.117.1
21:47:49.108107 arp who-has 83.246.117.218 tell 83.246.117.1
21:47:49.108344 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41381+ PTR? 218.117.246.83.in-addr.arpa. (45)
21:47:49.109268 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41381 NXDomain 0/1/0 (107)
21:47:49.117107 arp who-has 83.246.116.141 tell 83.246.116.1
21:47:49.134369 arp who-has 83.246.117.156 tell 83.246.117.1
21:47:49.134607 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41382+ PTR? 156.117.246.83.in-addr.arpa. (45)
21:47:49.135406 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41382 NXDomain 0/1/0 (107)
21:47:49.142551 arp who-has 83.246.116.126 tell 83.246.116.1
21:47:49.166541 arp who-has 83.246.117.70 tell 83.246.117.1
21:47:49.166732 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41383+ PTR? 70.117.246.83.in-addr.arpa. (44)
21:47:49.167341 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41383 NXDomain 0/1/0 (106)
21:47:49.177935 arp who-has 83.246.116.104 tell 83.246.116.1
21:47:49.183864 arp who-has 83.246.117.66 tell 83.246.117.1
21:47:49.213158 arp who-has 83.246.117.43 tell 83.246.117.1
21:47:49.213406 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41384+ PTR? 43.117.246.83.in-addr.arpa. (44)
21:47:49.214449 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41384 NXDomain 0/1/0 (106)
21:47:49.235560 arp who-has 83.246.117.246 tell 83.246.117.1
21:47:49.235804 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41385+ PTR? 246.117.246.83.in-addr.arpa. (45)
21:47:49.236811 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41385 NXDomain 0/1/0 (107)
21:47:49.260489 arp who-has 83.246.116.83 tell 83.246.116.1
21:47:49.260738 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41386+ PTR? 83.116.246.83.in-addr.arpa. (44)
21:47:49.261101 arp who-has 83.246.117.246 tell 83.246.117.1
21:47:49.261174 arp who-has 83.246.117.43 tell 83.246.117.1
21:

Re: ARP Dauerfeuer wie die ursache finden und unterbinden?

Posted: 2004-11-22 21:59
by skysurfer1
Hier mal ein kurzer tcp dump

:48:03.272780 arp who-has 83.246.117.40 tell 83.246.117.1
21:48:03.273083 arp who-has 83.246.117.79 tell 83.246.117.1
21:48:03.273135 arp who-has 83.246.116.110 tell 83.246.116.1
21:48:03.273214 arp who-has 83.246.117.90 tell 83.246.117.1
21:48:03.273240 arp who-has 83.246.117.241 tell 83.246.117.1
21:48:03.273269 arp who-has 83.246.117.125 tell 83.246.117.1
21:48:03.273296 arp who-has 83.246.116.236 tell 83.246.116.1
21:48:03.273323 arp who-has 83.246.116.194 tell 83.246.116.1
21:48:03.273629 arp who-has 83.246.116.249 tell 83.246.116.1
21:48:03.273856 arp who-has 83.246.117.127 tell 83.246.117.1
21:48:03.273893 arp who-has 83.246.117.44 tell 83.246.117.1
21:48:03.274069 arp who-has 83.246.117.106 tell 83.246.117.1
21:48:03.274232 arp who-has 83.246.117.230 tell 83.246.117.1
21:48:03.274669 arp who-has 83.246.117.138 tell 83.246.117.1
21:48:03.274694 arp who-has 83.246.116.130 tell 83.246.116.1
21:48:03.274747 arp who-has 83.246.117.162 tell 83.246.117.1
21:48:03.275041 arp who-has 83.246.116.252 tell 83.246.116.1
21:48:03.275373 arp who-has 83.246.116.125 tell 83.246.116.1
21:48:03.275491 arp who-has 83.246.117.26 tell 83.246.117.1
21:48:03.275608 arp who-has 83.246.116.207 tell 83.246.116.1
21:48:03.275793 arp who-has 83.246.116.134 tell 83.246.116.1
21:48:03.275867 arp who-has 83.246.117.244 tell 83.246.117.1
21:48:03.275903 arp who-has 83.246.117.245 tell 83.246.117.1
21:48:03.276253 arp who-has 83.246.116.221 tell 83.246.116.1
21:48:03.276737 arp who-has 83.246.117.99 tell 83.246.117.1
21:48:03.276772 arp who-has 83.246.117.2 tell 83.246.117.1
21:48:03.276968 arp who-has 83.246.117.137 tell 83.246.117.1
21:48:03.277005 arp who-has 83.246.117.60 tell 83.246.117.1
21:48:03.277324 arp who-has 83.246.117.167 tell 83.246.117.1
21:48:03.277364 arp who-has 83.246.116.213 tell 83.246.116.1
21:48:03.277400 arp who-has 83.246.116.129 tell 83.246.116.1
21:48:03.277483 arp who-has 83.246.117.210 tell 83.246.117.1
21:48:03.277716 arp who-has 83.246.117.243 tell 83.246.117.1
21:48:03.277918 arp who-has 83.246.116.197 tell 83.246.116.1
21:48:03.277972 arp who-has 83.246.117.155 tell 83.246.117.1
21:48:03.278025 arp who-has 83.246.117.131 tell 83.246.117.1
21:48:03.278053 arp who-has 83.246.116.204 tell 83.246.116.1
21:48:03.278192 arp who-has 83.246.116.212 tell 83.246.116.1
21:48:03.278345 arp who-has 83.246.116.104 tell 83.246.116.1
21:48:03.278500 arp who-has 83.246.117.249 tell 83.246.117.1
21:48:03.278738 arp who-has 83.246.116.217 tell 83.246.116.1
21:48:03.278776 arp who-has 83.246.116.143 tell 83.246.116.1
21:48:03.279192 arp who-has 83.246.117.223 tell 83.246.117.1
21:48:03.280012 arp who-has 83.246.116.114 tell 83.246.116.1
21:48:03.280528 arp who-has 83.246.117.185 tell 83.246.117.1
21:48:03.281504 arp who-has 83.246.117.197 tell 83.246.117.1
21:48:03.281660 arp who-has 83.246.116.165 tell 83.246.116.1
21:48:03.281810 arp who-has 83.246.116.214 tell 83.246.116.1
21:48:03.281956 arp who-has 83.246.117.69 tell 83.246.117.1
21:48:03.282252 arp who-has 83.246.117.100 tell 83.246.117.1
21:48:03.282280 arp who-has 83.246.117.75 tell 83.246.117.1
21:48:03.282307 arp who-has 83.246.117.89 tell 83.246.117.1
21:48:03.282386 arp who-has 83.246.116.174 tell 83.246.116.1
21:48:03.282470 arp who-has 83.246.117.74 tell 83.246.117.1
21:48:03.282576 arp who-has 83.246.117.126 tell 83.246.117.1
21:48:03.282684 arp who-has 83.246.116.227 tell 83.246.116.1
21:48:03.282821 arp who-has 83.246.116.160 tell 83.246.116.1
21:48:03.282847 arp who-has 83.246.117.110 tell 83.246.117.1
21:48:03.283083 arp who-has 83.246.117.205 tell 83.246.117.1
21:48:03.290050 arp who-has 83.246.116.246 tell 83.246.116.1
21:48:03.290300 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41600+ PTR? 246.116.246.83.in-addr.arpa. (45)
21:48:03.290934 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41600 NXDomain 0/1/0 (107)
21:48:03.315007 arp who-has 83.246.117.209 tell 83.246.117.1
21:48:03.318984 arp who-has 83.246.117.71 tell 83.246.117.1
21:48:03.333460 arp who-has 83.246.117.62 tell 83.246.117.1
21:48:03.333695 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41601+ PTR? 62.117.246.83.in-addr.arpa. (44)
21:48:03.335054 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41601 NXDomain 0/1/0 (106)
21:48:03.341354 arp who-has 83.246.116.220 tell 83.246.116.1
21:48:03.357462 arp who-has 83.246.117.236 tell 83.246.117.1
21:48:03.360521 arp who-has 83.246.117.28 tell 83.246.117.1
21:48:03.360752 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41602+ PTR? 28.117.246.83.in-addr.arpa. (44)
21:48:03.361141 arp who-has 83.246.117.219 tell 83.246.117.1
21:48:03.361404 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41602 NXDomain 0/1/0 (106)
21:48:03.367041 arp who-has 83.246.117.174 tell 83.246.117.1
21:48:03.386748 arp who-has 83.246.117.198 tell 83.246.117.1
21:48:03.386986 IP server8324611632.serverpool.info.serverpool.info.32781 > 81.3.14.238.domain: 41603+ PTR? 198.117.246.83.in-addr.arpa. (45)
21:48:03.387828 IP 81.3.14.238.domain > server8324611632.serverpool.info.serverpool.info.32781: 41603

Re: ARP Dauerfeuer wie die ursache finden und unterbinden?

Posted: 2004-11-23 01:08
by dodolin
Gehe ich richtig in der Annahme, dass folgende 2 IPs beide zu deinem Server gehören?

83.246.117.1
83.246.116.1

Und dass beide IPs mit einer Netzmaske von /24 bzw. 255.255.255.0 konfiguriert sind? (ifconfig)

Irgendwie ziemlich unerklärbar, warum dein Rechner da soviele ARP-Request rausbläst - unter der Voraussetzung, dass der tcpdump vollständig ist und nichts fehlt.

Re: ARP Dauerfeuer wie die ursache finden und unterbinden?

Posted: 2004-11-23 02:19
by alexander newald
Müsste er nicht auch antwort bekommen?

Mach mal ein


tcpdump -p -e -i eth0 arp

wetten, das ist garnicht von deinem Rechner sondern ein Broadcast

Re: ARP Dauerfeuer wie die ursache finden und unterbinden?

Posted: 2004-11-23 09:50
by dodolin
Deswegen fragte ich ja, welche IP(s) zu seinem Server gehören. Weil ohne diese Info sagt das recht wenig aus. :)

Re: ARP Dauerfeuer wie die ursache finden und unterbinden?

Posted: 2004-11-23 17:47
by skysurfer1
also die ip adresse des servers ist 83.246.116.32
netmask ist 255.255.255.0

und wieder ein tcpdump auszug mit -p -e -i ethÃ? arp

17:41:43.650131 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.88 tell 83.246.117.1
17:41:43.652270 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.23 tell 83.246.117.1
17:41:43.657941 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.80 tell 83.246.117.1
17:41:43.692439 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.247 tell 83.246.116.1
17:41:43.697512 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.218 tell 83.246.117.1
17:41:43.718667 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.178 tell 83.246.116.1
17:41:43.732213 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.146 tell 83.246.117.1
17:41:43.769952 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.202 tell 83.246.117.1
17:41:43.793916 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.93 tell 83.246.116.1
17:41:43.797708 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.152 tell 83.246.116.1
17:41:43.813023 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.36 tell 83.246.117.1
17:41:43.827141 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.224 tell 83.246.116.1
17:41:43.916004 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.132 tell 83.246.116.1
17:41:43.917946 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.190 tell 83.246.116.1
17:41:43.918652 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.159 tell 83.246.116.1
17:41:43.926177 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.108 tell 83.246.117.1
17:41:43.928082 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.156 tell 83.246.117.1
17:41:43.950221 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.99 tell 83.246.116.1
17:41:43.960630 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.129 tell 83.246.117.1
17:41:43.962476 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.169 tell 83.246.117.1
17:41:43.968768 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.225 tell 83.246.116.1
17:41:43.974040 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.170 tell 83.246.117.1
17:41:44.002555 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.236 tell 83.246.117.1
17:41:44.027546 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.196 tell 83.246.117.1
17:41:44.037676 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.108 tell 83.246.116.1
17:41:44.043513 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.92 tell 83.246.116.1
17:41:44.095488 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.195 tell 83.246.117.1
17:41:44.112283 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.105 tell 83.246.116.1
17:41:44.125772 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.219 tell 83.246.117.1
17:41:44.137736 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.201 tell 83.246.117.1
17:41:44.143445 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.106 tell 83.246.116.1
17:41:44.157709 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.173 tell 83.246.116.1
17:41:44.164902 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.240 tell 83.246.116.1
17:41:44.200177 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.167 tell 83.246.116.1
17:41:44.203337 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.151 tell 83.246.117.1
17:41:44.207559 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.124 tell 83.246.117.1
17:41:44.211879 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.223 tell 83.246.117.1
17:41:44.248618 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.248 tell 83.246.116.1
17:41:44.255435 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.101 tell 83.246.116.1
17:41:44.260163 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.213 tell 83.246.116.1
17:41:44.273877 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.9 tell 83.246.117.1
17:41:44.297076 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.215 tell 83.246.117.1
17:41:44.306740 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.116 tell 83.246.117.1
17:41:44.307207 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.187 tell 83.246.116.1
17:41:44.323606 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.188 tell 83.246.116.1
17:41:44.343845 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.198 tell 83.246.117.1
17:41:44.357229 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.131 tell 83.246.117.1
17:41:44.359997 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.160 tell 83.246.116.1
17:41:44.372532 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.234 tell 83.246.117.1
17:41:44.400734 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.221 tell 83.246.117.1
17:41:44.424307 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.0 tell 83.246.117.1
17:41:44.442725 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.191 tell 83.246.117.1
17:41:44.457549 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.134 tell 83.246.117.1
17:41:44.480568 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.215 tell 83.246.116.1
17:41:44.480708 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.60 tell 83.246.117.1
17:41:44.480772 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.134 tell 83.246.117.1
17:41:44.480825 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.204 tell 83.246.117.1
17:41:44.480957 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.191 tell 83.246.117.1
17:41:44.481124 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.0 tell 83.246.117.1
17:41:44.481192 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.84 tell 83.246.116.1
17:41:44.481348 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.221 tell 83.246.117.1
17:41:44.481470 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.220 tell 83.246.116.1
17:41:44.481623 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.226 tell 83.246.116.1
17:41:44.481716 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.216 tell 83.246.117.1
17:41:44.481959 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.240 tell 83.246.117.1
17:41:44.482149 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.234 tell 83.246.117.1
17:41:44.482176 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.113 tell 83.246.116.1
17:41:44.482240 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.160 tell 83.246.116.1
17:41:44.482296 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.131 tell 83.246.116.1
17:41:44.482331 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.131 tell 83.246.117.1
17:41:44.482367 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.198 tell 83.246.117.1
17:41:44.482529 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.15 tell 83.246.117.1
17:41:44.482594 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.120 tell 83.246.116.1
17:41:44.482809 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.188 tell 83.246.116.1
17:41:44.482920 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.143 tell 83.246.116.1
17:41:44.482974 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.210 tell 83.246.116.1
17:41:44.483354 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.187 tell 83.246.116.1
17:41:44.483390 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.116 tell 83.246.117.1
17:41:44.483744 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.215 tell 83.246.117.1
17:41:44.483954 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.9 tell 83.246.117.1
17:41:44.484062 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.136 tell 83.246.116.1
17:41:44.484394 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.213 tell 83.246.116.1
17:41:44.484595 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.127 tell 83.246.117.1
17:41:44.484632 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.101 tell 83.246.116.1
17:41:44.484658 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.65 tell 83.246.117.1
17:41:44.484753 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.188 tell 83.246.117.1
17:41:44.484779 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.226 tell 83.246.117.1
17:41:44.484835 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.211 tell 83.246.116.1
17:41:44.484944 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.94 tell 83.246.117.1
17:41:44.484974 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.0 tell 83.246.116.1
17:41:44.485003 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.198 tell 83.246.116.1
17:41:44.485042 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.248 tell 83.246.116.1
17:41:44.485097 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.50 tell 83.246.117.1
17:41:44.485124 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.6 tell 83.246.117.1
17:41:44.485457 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.223 tell 83.246.117.1
17:41:44.485499 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.124 tell 83.246.117.1
17:41:44.485619 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.151 tell 83.246.117.1
17:41:44.485657 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.167 tell 83.246.116.1
17:41:44.485749 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.52 tell 83.246.117.1
17:41:44.486127 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.240 tell 83.246.116.1
17:41:44.486205 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.173 tell 83.246.116.1
17:41:44.486240 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.106 tell 83.246.116.1
17:41:44.486549 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.91 tell 83.246.117.1
17:41:44.486835 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.201 tell 83.246.117.1
17:41:44.487055 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.219 tell 83.246.117.1
17:41:44.487229 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.194 tell 83.246.116.1
17:41:44.487257 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.138 tell 83.246.116.1
17:41:44.487311 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.125 tell 83.246.116.1
17:41:44.487336 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.162 tell 83.246.116.1
17:41:44.487449 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.181 tell 83.246.116.1
17:41:44.487474 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.170 tell 83.246.116.1
17:41:44.487855 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.77 tell 83.246.117.1
17:41:44.487990 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.44 tell 83.246.117.1
17:41:44.488127 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.120 tell 83.246.117.1
17:41:44.488272 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.122 tell 83.246.116.1
17:41:44.488327 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.90 tell 83.246.117.1
17:41:44.488432 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.105 tell 83.246.116.1
17:41:44.488663 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.195 tell 83.246.117.1
17:41:44.488690 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.125 tell 83.246.117.1
17:41:44.488716 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.137 tell 83.246.117.1
17:41:44.488742 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.95 tell 83.246.117.1
17:41:44.488924 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.40 tell 83.246.117.1
17:41:44.488925 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.107 tell 83.246.116.1
17:41:44.488987 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.254 tell 83.246.116.1
17:41:44.489013 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.104 tell 83.246.116.1
17:41:44.489039 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.213 tell 83.246.117.1
17:41:44.489392 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.208 tell 83.246.116.1
17:41:44.489571 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.119 tell 83.246.116.1
17:41:44.489637 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.92 tell 83.246.116.1
17:41:44.489812 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.85 tell 83.246.116.1
17:41:44.489867 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.196 tell 83.246.116.1
17:41:44.489931 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.108 tell 83.246.116.1
17:41:44.489999 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.175 tell 83.246.116.1
17:41:44.490172 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.196 tell 83.246.117.1
17:41:44.490196 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.242 tell 83.246.116.1
17:41:44.490223 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.58 tell 83.246.117.1
17:41:44.490304 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.165 tell 83.246.117.1
17:41:44.490413 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.243 tell 83.246.117.1
17:41:44.490513 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.236 tell 83.246.117.1
17:41:44.490657 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.243 tell 83.246.116.1
17:41:44.490684 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.207 tell 83.246.117.1
17:41:44.490738 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.147 tell 83.246.116.1
17:41:44.490843 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.170 tell 83.246.117.1
17:41:44.490880 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.225 tell 83.246.116.1
17:41:44.490995 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.169 tell 83.246.117.1
17:41:44.491033 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.129 tell 83.246.117.1
17:41:44.491500 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.99 tell 83.246.116.1
17:41:44.491601 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.244 tell 83.246.117.1
17:41:44.491681 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.221 tell 83.246.116.1
17:41:44.491817 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.31 tell 83.246.117.1
17:41:44.492000 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.5 tell 83.246.117.1
17:41:44.492056 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.193 tell 83.246.116.1
17:41:44.492098 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.192 tell 83.246.117.1
17:41:44.492194 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.156 tell 83.246.117.1
17:41:44.492232 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.108 tell 83.246.117.1
17:41:44.492423 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.73 tell 83.246.117.1
17:41:44.492449 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.138 tell 83.246.117.1
17:41:44.492700 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.159 tell 83.246.116.1
17:41:44.492753 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.121 tell 83.246.116.1
17:41:44.492814 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.190 tell 83.246.116.1
17:41:44.492856 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.132 tell 83.246.116.1
17:41:44.493221 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.191 tell 83.246.116.1
17:41:44.493302 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.113 tell 83.246.117.1
17:41:44.493439 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.114 tell 83.246.117.1
17:41:44.493549 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.247 tell 83.246.117.1
17:41:44.493632 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.149 tell 83.246.116.1
17:41:44.493763 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.92 tell 83.246.117.1
17:41:44.493877 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.224 tell 83.246.116.1
17:41:44.493954 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.36 tell 83.246.117.1
17:41:44.493991 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.152 tell 83.246.116.1
17:41:44.494030 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.93 tell 83.246.116.1
17:41:44.494256 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.117 tell 83.246.116.1
17:41:44.494309 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.253 tell 83.246.116.1
17:41:44.494367 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.144 tell 83.246.117.1
17:41:44.494393 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.184 tell 83.246.116.1
17:41:44.494499 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.46 tell 83.246.117.1
17:41:44.494603 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.16 tell 83.246.117.1
17:41:44.494633 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.197 tell 83.246.117.1
17:41:44.494749 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.233 tell 83.246.117.1
17:41:44.494787 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.202 tell 83.246.117.1
17:41:44.495108 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.217 tell 83.246.116.1
17:41:44.495312 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.141 tell 83.246.116.1
17:41:44.495366 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.177 tell 83.246.117.1
17:41:44.495426 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.27 tell 83.246.117.1
17:41:44.495562 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.253 tell 83.246.117.1
17:41:44.495589 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.241 tell 83.246.116.1
17:41:44.495616 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.86 tell 83.246.117.1
17:41:44.495759 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.146 tell 83.246.117.1
17:41:44.496140 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.178 tell 83.246.116.1
17:41:44.496336 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.140 tell 83.246.116.1
17:41:44.496422 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.250 tell 83.246.117.1
17:41:44.496504 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.173 tell 83.246.117.1
17:41:44.496531 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.235 tell 83.246.116.1
17:41:44.496750 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.95 tell 83.246.116.1
17:41:44.496776 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.172 tell 83.246.116.1
17:41:44.496923 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.218 tell 83.246.117.1
17:41:44.497043 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.247 tell 83.246.116.1
17:41:44.497842 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.80 tell 83.246.117.1
17:41:44.497876 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.23 tell 83.246.117.1
17:41:44.498065 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.88 tell 83.246.117.1
17:41:44.498470 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.94 tell 83.246.116.1
17:41:44.498776 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.251 tell 83.246.117.1
17:41:44.499020 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.152 tell 83.246.117.1
17:41:44.499101 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.14 tell 83.246.117.1
17:41:44.499154 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.126 tell 83.246.117.1
17:41:44.499208 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.64 tell 83.246.117.1
17:41:44.499623 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.205 tell 83.246.117.1
17:41:44.499863 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.150 tell 83.246.117.1
17:41:44.499895 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.179 tell 83.246.116.1
17:41:44.499973 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.155 tell 83.246.117.1
17:41:44.500086 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.252 tell 83.246.116.1
17:41:44.500140 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.244 tell 83.246.116.1
17:41:44.500165 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.116.116 tell 83.246.116.1
17:41:44.500191 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.133 tell 83.246.117.1
17:41:44.500247 00:0c:db:0d:b1:78 > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 83.246.117.122 tell 83.246.117.1

Re: ARP Dauerfeuer wie die ursache finden und unterbinden?

Posted: 2004-11-23 17:48
by skysurfer1
ahso neuste begründung des supports ... es ist ja wieder ein wurm unterwegs

Re: ARP Dauerfeuer wie die ursache finden und unterbinden?

Posted: 2004-11-23 18:07
by alexander newald
Der Traffic kommt nicht von deinem Server, sondern von den ARP Broadcasts. Kannst du die IPs (nicht 83.246.117.1,83.246.116.1 sondern 83.246.117.88 etc ) anpingen?

Wird dir der Traffic berechnet?

Re: ARP Dauerfeuer wie die ursache finden und unterbinden?

Posted: 2004-11-23 18:22
by skysurfer1
also ich kann die adressen weder von hier noch vom server aus pingen..

ja irgendwann wird der traffic dann schon berechnet .. wenn der inkl. traffic eben verbraucht ist ..

Re: ARP Dauerfeuer wie die ursache finden und unterbinden?

Posted: 2004-11-23 18:25
by alexander newald
Ich würde mal dem Support freundlich schreiben, dass du nicht damit einverstanden bist, dass der Traffic durch die ARP Broadcasts, die nicht durch deinen Server verursacht werden, an deinem Traffic angerechnet werden (sowas in der Richtung) und schauen, dass du auch eine Zahl für den Traffic / Tag findest. Oder halt anrufen.

Re: ARP Dauerfeuer wie die ursache finden und unterbinden?

Posted: 2004-11-23 18:32
by skysurfer1
hab ich vorher schonmal gemacht ..
vorallem da der server ja leer ist bis jetzt und eigentlich nicht da ist was traffic erzeugt .. und der innerhalb von 3 tagen 4 gb traffic hat ist doch sehr verwunderlich ... mal sehen was die dazu sagen

Re: ARP Dauerfeuer wie die ursache finden und unterbinden?

Posted: 2004-11-24 13:52
by dodolin
Ich vermute, die die da die ARP Anfragen rausblasen, sind deine Defaultrouter, die dem Provider gehören? Die mit der .1 am Ende, meine ich. Könnte das sein?

Wenn dir das berechnet wird und interner Traffic nicht frei ist, würde ich da auch Protest einlegen. Es kann ja nicht sein, dass dir der Traffic ohne Ende berechnet wird (naja, ARP-Pakete sind jetzt vermutlich nicht SO groß, aber trotzdem...), nur weil dein Hoster seine Router Konfiguration nicht im Griff hat. Die sollten doch wenigstens nen ARP-Cache haben, sodass pro IP im Subnet höchstens eine Anfrage pro Zeit X per Broadcast rausgeht...!
All times are UTC+01:00
Page 1 of 1