1*57718be8SEnji Cooper# 23:18:36.130424 192.168.113.1.1511 > 192.168.113.3.1723: S 2884651685:2884651685(0) win 64240 <mss 1460,nop,nop,sackOK> (DF) 2*57718be8SEnji Cooper[in,pcn1=192.168.113.3] 3*57718be8SEnji Cooper4500 0030 5e11 4000 8006 3961 c0a8 7101 c0a8 7103 4*57718be8SEnji Cooper05e7 06bb abf0 4aa5 0000 0000 7002 faf0 21a1 0000 0204 05b4 0101 0402 5*57718be8SEnji Cooper 6*57718be8SEnji Cooper# 23:18:36.130778 192.168.113.3.1723 > 192.168.113.1.1511: S 2774821082:2774821082(0) ack 2884651686 win 32768 <mss 1460> (DF) 7*57718be8SEnji Cooper[out,pcn1] 8*57718be8SEnji Cooper4500 002c 69a6 4000 4006 6dd0 c0a8 7103 c0a8 7101 9*57718be8SEnji Cooper06bb 05e7 a564 68da abf0 4aa6 6012 8000 a348 0000 0204 05b4 10*57718be8SEnji Cooper 11*57718be8SEnji Cooper# 23:18:36.130784 192.168.113.1.1511 > 192.168.113.3.1723: P 1:157(156) ack 1 win 64240: pptp CTRL_MSGTYPE=SCCRQ PROTO_VER(1.0) FRAME_CAP(A) BEARER_CAP(A) MAX_CHAN(0) FIRM_REV(2600) HOSTNAME() VENDOR(Microsoft Windows NT) (DF) 12*57718be8SEnji Cooper[in,pcn1] 13*57718be8SEnji Cooper4500 00c4 5e12 4000 8006 38cc c0a8 7101 c0a8 7103 14*57718be8SEnji Cooper05e7 06bb abf0 4aa6 a564 68db 15*57718be8SEnji Cooper5018 faf0 e2a0 0000 009c 0001 1a2b 3c4d 16*57718be8SEnji Cooper0001 0000 0100 0000 0000 0001 0000 0001 17*57718be8SEnji Cooper0000 0a28 0000 0000 0000 0000 0000 0000 18*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 19*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 20*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 21*57718be8SEnji Cooper0000 0000 4d69 6372 6f73 6f66 7420 5769 22*57718be8SEnji Cooper6e64 6f77 7320 4e54 0000 0000 0000 0000 23*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 24*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 25*57718be8SEnji Cooper0000 0000 26*57718be8SEnji Cooper 27*57718be8SEnji Cooper# 23:18:36.260235 192.168.113.3.1723 > 192.168.113.1.1511: P 1:157(156) ack 157 win 33580: pptp CTRL_MSGTYPE=SCCRP PROTO_VER(1.0) RESULT_CODE(1) ERR_CODE(0) FRAME_CAP() BEARER_CAP() MAX_CHAN(1) FIRM_REV(1) HOSTNAME(local) VENDOR(linux) (DF) 28*57718be8SEnji Cooper[out,pcn1] 29*57718be8SEnji Cooper4500 00c4 69a7 4000 4006 6d37 c0a8 7103 c0a8 7101 30*57718be8SEnji Cooper06bb 05e7 a564 68db abf0 4b42 31*57718be8SEnji Cooper5018 832c cecf 0000 009c 0001 1a2b 3c4d 32*57718be8SEnji Cooper0002 0000 0100 0100 0000 0000 0000 0000 33*57718be8SEnji Cooper0001 0001 6c6f 6361 6c00 0000 0000 0000 34*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 35*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 36*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 37*57718be8SEnji Cooper0000 0000 6c69 6e75 7800 0000 0000 0000 38*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 39*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 40*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 41*57718be8SEnji Cooper0000 0000 42*57718be8SEnji Cooper 43*57718be8SEnji Cooper# 23:18:36.260252 192.168.113.1.1511 > 192.168.113.3.1723: P 157:325(168) ack 157 win 64084: pptp CTRL_MSGTYPE=OCRQ CALL_ID(16384) CALL_SER_NUM(4913) MIN_BPS(300) MAX_BPS(100000000) BEARER_TYPE(Any) FRAME_TYPE(E) RECV_WIN(64) PROC_DELAY(0) PHONE_NO_LEN(0) PHONE_NO() SUB_ADDR() (DF) 44*57718be8SEnji Cooper[in,pcn1] 45*57718be8SEnji Cooper4500 00d0 5e13 4000 8006 38bf c0a8 7101 c0a8 7103 46*57718be8SEnji Cooper05e7 06bb abf0 4b42 a564 6977 47*57718be8SEnji Cooper5018 fa54 ac07 0000 00a8 0001 1a2b 3c4d 48*57718be8SEnji Cooper0007 0000 4000 1331 0000 012c 05f5 e100 49*57718be8SEnji Cooper0000 0003 0000 0003 0040 0000 0000 0000 50*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 51*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 52*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 53*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 54*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 55*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 56*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 57*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 58*57718be8SEnji Cooper 59*57718be8SEnji Cooper# 23:18:36.272856 192.168.113.3.1723 > 192.168.113.1.1511: P 157:189(32) ack 325 win 33580: pptp CTRL_MSGTYPE=OCRP CALL_ID(0) PEER_CALL_ID(16384) RESULT_CODE(1) ERR_CODE(0) CAUSE_CODE(0) CONN_SPEED(100000000) RECV_WIN(64) PROC_DELAY(0) PHY_CHAN_ID(0) (DF) 60*57718be8SEnji Cooper[out,pcn1] 61*57718be8SEnji Cooper4500 0048 69a8 4000 4006 6db2 c0a8 7103 c0a8 7101 62*57718be8SEnji Cooper06bb 05e7 a564 6977 abf0 4bea 63*57718be8SEnji Cooper5018 832c 36fa 0000 0020 0001 1a2b 3c4d 64*57718be8SEnji Cooper0008 0000 0000 4000 0100 0000 05f5 e100 65*57718be8SEnji Cooper0040 0000 0000 0000 66*57718be8SEnji Cooper 67*57718be8SEnji Cooper# 23:18:36.321819 192.168.113.1.1511 > 192.168.113.3.1723: P 325:349(24) ack 189 win 64052: pptp CTRL_MSGTYPE=SLI PEER_CALL_ID(0) SEND_ACCM(0xffffffff) RECV_ACCM(0xffffffff) (DF) 68*57718be8SEnji Cooper[in,pcn1] 69*57718be8SEnji Cooper4500 0040 5e14 4000 8006 394e c0a8 7101 c0a8 7103 70*57718be8SEnji Cooper05e7 06bb abf0 4bea a564 6997 71*57718be8SEnji Cooper5018 fa34 e810 0000 0018 0001 1a2b 3c4d 72*57718be8SEnji Cooper000f 0000 0000 0000 ffff ffff ffff ffff 73*57718be8SEnji Cooper 74*57718be8SEnji Cooper# 23:18:36.349759 192.168.113.1 > 192.168.113.3: gre [KSv1] ID:0000 S:0 ppp: LCP 25: Conf-Req(0), MRU=1400, Magic-Num=577f7c5b, PFC, ACFC, Call-Back CBCP 75*57718be8SEnji Cooper[in,pcn1] 76*57718be8SEnji Cooper4500 0039 5e15 0000 802f 792b c0a8 7101 c0a8 7103 77*57718be8SEnji Cooper3001 880b 0019 0000 0000 0000 78*57718be8SEnji Cooperff03 c021 0100 0015 0104 0578 0506 577f 79*57718be8SEnji Cooper7c5b 0702 0802 0d03 06 80*57718be8SEnji Cooper 81*57718be8SEnji Cooper# 23:18:36.389970 192.168.113.3 > 192.168.113.1: gre [KAv1] ID:4000 A:4294967295 [|gre] 82*57718be8SEnji Cooper[out,pcn1] 83*57718be8SEnji Cooper4500 0020 69a9 0000 ff2f eeaf c0a8 7103 c0a8 7101 84*57718be8SEnji Cooper2081 880b 0000 4000 ffff ffff 85*57718be8SEnji Cooper 86*57718be8SEnji Cooper# 23:18:36.518426 192.168.113.3.1723 > 192.168.113.1.1511: . ack 349 win 33580 (DF) 87*57718be8SEnji Cooper[out,pcn1] 88*57718be8SEnji Cooper4500 0028 69aa 4000 4006 6dd0 c0a8 7103 c0a8 7101 89*57718be8SEnji Cooper06bb 05e7 a564 6997 abf0 4c02 5010 832c b5c1 0000 90*57718be8SEnji Cooper 91*57718be8SEnji Cooper# 23:18:36.555363 192.168.113.3 > 192.168.113.1: gre [KSv1] ID:4000 S:0 ppp: LCP 24: Conf-Req(1), ACCM=00000000, Magic-Num=22d90cfa, PFC, ACFC 92*57718be8SEnji Cooper[out,pcn1] 93*57718be8SEnji Cooper4500 0038 69ab 0000 ff2f ee95 c0a8 7103 c0a8 7101 94*57718be8SEnji Cooper3001 880b 0018 4000 0000 0000 95*57718be8SEnji Cooperff03 c021 0101 0014 0206 0000 0000 0506 96*57718be8SEnji Cooper22d9 0cfa 0702 0802 97*57718be8SEnji Cooper 98*57718be8SEnji Cooper# 23:18:36.556030 192.168.113.3 > 192.168.113.1: gre [KSAv1] ID:4000 S:1 A:0 ppp: LCP 11: Conf-Rej(0), Call-Back CBCP 99*57718be8SEnji Cooper[out,pcn1] 100*57718be8SEnji Cooper4500 002f 69ac 0000 ff2f ee9d c0a8 7103 c0a8 7101 101*57718be8SEnji Cooper3081 880b 000b 4000 0000 0001 0000 0000 ff03 c021 0400 0007 0d03 06 102*57718be8SEnji Cooper 103*57718be8SEnji Cooper# 23:18:36.557166 192.168.113.1 > 192.168.113.3: gre [KSAv1] ID:0000 S:1 A:1 ppp: LCP 24: Conf-Ack(1), ACCM=00000000, Magic-Num=22d90cfa, PFC, ACFC 104*57718be8SEnji Cooper[in,pcn1] 105*57718be8SEnji Cooper4500 003c 5e16 0000 802f 7927 c0a8 7101 c0a8 7103 106*57718be8SEnji Cooper3081 880b 0018 0000 0000 0001 107*57718be8SEnji Cooper0000 0001 ff03 c021 0201 0014 0206 0000 108*57718be8SEnji Cooper0000 0506 22d9 0cfa 0702 0802 109*57718be8SEnji Cooper 110*57718be8SEnji Cooper# 23:18:36.557764 192.168.113.1 > 192.168.113.3: gre [KSv1] ID:0000 S:2 ppp: LCP 22: Conf-Req(1), MRU=1400, Magic-Num=577f7c5b, PFC, ACFC 111*57718be8SEnji Cooper[in,pcn1] 112*57718be8SEnji Cooper4500 0036 5e17 0000 802f 792c c0a8 7101 c0a8 7103 113*57718be8SEnji Cooper3001 880b 0016 0000 0000 0002 114*57718be8SEnji Cooperff03 c021 0101 0012 0104 0578 0506 577f 115*57718be8SEnji Cooper7c5b 0702 0802 116*57718be8SEnji Cooper 117*57718be8SEnji Cooper# 23:18:36.564658 192.168.113.3 > 192.168.113.1: gre [KSAv1] ID:4000 S:2 A:2 ppp: LCP 22: Conf-Ack(1), MRU=1400, Magic-Num=577f7c5b, PFC, ACFC 118*57718be8SEnji Cooper[out,pcn1] 119*57718be8SEnji Cooper4500 003a 69ad 0000 ff2f ee91 c0a8 7103 c0a8 7101 120*57718be8SEnji Cooper3081 880b 0016 4000 0000 0002 121*57718be8SEnji Cooper0000 0002 ff03 c021 0201 0012 0104 0578 122*57718be8SEnji Cooper0506 577f 7c5b 0702 0802 123*57718be8SEnji Cooper 124*57718be8SEnji Cooper# 23:18:36.564803 192.168.113.3 > 192.168.113.1: gre [KSv1] ID:4000 S:3 ppp: IPCP 18: Conf-Req(1), IP-Addr=192.168.0.1, IP-Comp VJ-Comp 125*57718be8SEnji Cooper[out,pcn1] 126*57718be8SEnji Cooper4500 0032 69ae 0000 ff2f ee98 c0a8 7103 c0a8 7101 127*57718be8SEnji Cooper3001 880b 0012 4000 0000 0003 128*57718be8SEnji Cooper8021 0101 0010 0306 c0a8 0001 0206 002d 129*57718be8SEnji Cooper0f01 130*57718be8SEnji Cooper 131*57718be8SEnji Cooper# 23:18:36.570395 192.168.113.1.1511 > 192.168.113.3.1723: P 349:373(24) ack 189 win 64052: pptp CTRL_MSGTYPE=SLI PEER_CALL_ID(0) SEND_ACCM(0x00000000) RECV_ACCM(0xffffffff) (DF) 132*57718be8SEnji Cooper[in,pcn1] 133*57718be8SEnji Cooper4500 0040 5e18 4000 8006 394a c0a8 7101 c0a8 7103 134*57718be8SEnji Cooper05e7 06bb abf0 4c02 a564 6997 135*57718be8SEnji Cooper5018 fa34 e7f8 0000 0018 0001 1a2b 3c4d 136*57718be8SEnji Cooper000f 0000 0000 0000 0000 0000 ffff ffff 137*57718be8SEnji Cooper 138*57718be8SEnji Cooper# 23:18:36.573307 192.168.113.1 > 192.168.113.3: gre [KSAv1] ID:0000 S:3 A:3 ppp: LCP 20: Ident(2), Magic-Num=577f7c5b 139*57718be8SEnji Cooper[in,pcn1] 140*57718be8SEnji Cooper4500 0038 5e19 0000 802f 7928 c0a8 7101 c0a8 7103 141*57718be8SEnji Cooper3081 880b 0014 0000 0000 0003 142*57718be8SEnji Cooper0000 0003 c021 0c02 0012 577f 7c5b 4d53 143*57718be8SEnji Cooper5241 5356 352e 3130 144*57718be8SEnji Cooper 145*57718be8SEnji Cooper# 23:18:36.573856 192.168.113.3 > 192.168.113.1: gre [KSAv1] ID:4000 S:4 A:3 ppp: LCP 26: Code-Rej(2) 146*57718be8SEnji Cooper[out,pcn1] 147*57718be8SEnji Cooper4500 003e 69af 0000 ff2f ee8b c0a8 7103 c0a8 7101 148*57718be8SEnji Cooper3081 880b 001a 4000 0000 0004 149*57718be8SEnji Cooper0000 0003 ff03 c021 0702 0016 0c02 0012 150*57718be8SEnji Cooper577f 7c5b 4d53 5241 5356 352e 3130 151*57718be8SEnji Cooper 152*57718be8SEnji Cooper# 23:18:36.584936 192.168.113.1 > 192.168.113.3: gre [KSAv1] ID:0000 S:4 A:4 ppp: LCP 26: Ident(3), Magic-Num=577f7c5b 153*57718be8SEnji Cooper[in,pcn1] 154*57718be8SEnji Cooper4500 003e 5e1a 0000 802f 7921 c0a8 7101 c0a8 7103 155*57718be8SEnji Cooper3081 880b 001a 0000 0000 0004 156*57718be8SEnji Cooper0000 0004 c021 0c03 0018 577f 7c5b 4d53 157*57718be8SEnji Cooper5241 532d 302d 434c 4159 4d4f 4f52 158*57718be8SEnji Cooper 159*57718be8SEnji Cooper# 23:18:36.585562 192.168.113.3 > 192.168.113.1: gre [KSAv1] ID:4000 S:5 A:4 ppp: LCP 32: Code-Rej(3) 160*57718be8SEnji Cooper[out,pcn1] 161*57718be8SEnji Cooper4500 0044 69b0 0000 ff2f ee84 c0a8 7103 c0a8 7101 162*57718be8SEnji Cooper3081 880b 0020 4000 0000 0005 163*57718be8SEnji Cooper0000 0004 ff03 c021 0703 001c 0c03 0018 164*57718be8SEnji Cooper577f 7c5b 4d53 5241 532d 302d 434c 4159 165*57718be8SEnji Cooper4d4f 4f52 166*57718be8SEnji Cooper 167*57718be8SEnji Cooper# 23:18:36.588721 192.168.113.1 > 192.168.113.3: gre [KSAv1] ID:0000 S:5 A:5 ppp: CCP 12: Conf-Req(4), MPPC 168*57718be8SEnji Cooper[in,pcn1] 169*57718be8SEnji Cooper4500 0030 5e1b 0000 802f 792e c0a8 7101 c0a8 7103 170*57718be8SEnji Cooper3081 880b 000c 0000 0000 0005 171*57718be8SEnji Cooper0000 0005 80fd 0104 000a 1206 0100 0001 172*57718be8SEnji Cooper 173*57718be8SEnji Cooper# 23:18:36.589445 192.168.113.3 > 192.168.113.1: gre [KSAv1] ID:4000 S:6 A:5 ppp: CCP 6: Conf-Req(1) 174*57718be8SEnji Cooper[out,pcn1] 175*57718be8SEnji Cooper4500 002a 69b1 0000 ff2f ee9d c0a8 7103 c0a8 7101 176*57718be8SEnji Cooper3081 880b 0006 4000 0000 0006 177*57718be8SEnji Cooper0000 0005 80fd 0101 0004 178*57718be8SEnji Cooper 179*57718be8SEnji Cooper# 23:18:36.589540 192.168.113.3 > 192.168.113.1: gre [KSv1] ID:4000 S:7 ppp: CCP 12: Conf-Rej(4), MPPC 180*57718be8SEnji Cooper[out,pcn1] 181*57718be8SEnji Cooper4500 002c 69b2 0000 ff2f ee9a c0a8 7103 c0a8 7101 182*57718be8SEnji Cooper3001 880b 000c 4000 0000 0007 183*57718be8SEnji Cooper80fd 0404 000a 1206 0100 0001 184*57718be8SEnji Cooper 185*57718be8SEnji Cooper# 23:18:36.590023 192.168.113.1 > 192.168.113.3: gre [KSAv1] ID:0000 S:6 A:7 ppp: IPCP 36: Conf-Req(5), IP-Addr=0.0.0.0, Pri-DNS=0.0.0.0, Pri-NBNS=0.0.0.0, Sec-DNS=0.0.0.0, Sec-NBNS=0.0.0.0 186*57718be8SEnji Cooper[in,pcn1] 187*57718be8SEnji Cooper4500 0048 5e1c 0000 802f 7915 c0a8 7101 c0a8 7103 188*57718be8SEnji Cooper3081 880b 0024 0000 0000 0006 189*57718be8SEnji Cooper0000 0007 8021 0105 0022 0306 0000 0000 190*57718be8SEnji Cooper8106 0000 0000 8206 0000 0000 8306 0000 191*57718be8SEnji Cooper0000 8406 0000 0000 192*57718be8SEnji Cooper 193*57718be8SEnji Cooper# 23:18:36.590489 192.168.113.3 > 192.168.113.1: gre [KSAv1] ID:4000 S:8 A:6 ppp: IPCP 30: Conf-Rej(5), Pri-DNS=0.0.0.0, Pri-NBNS=0.0.0.0, Sec-DNS=0.0.0.0, Sec-NBNS=0.0.0.0 194*57718be8SEnji Cooper[out,pcn1] 195*57718be8SEnji Cooper4500 0042 69b3 0000 ff2f ee83 c0a8 7103 c0a8 7101 196*57718be8SEnji Cooper3081 880b 001e 4000 0000 0008 197*57718be8SEnji Cooper0000 0006 8021 0405 001c 8106 0000 0000 198*57718be8SEnji Cooper8206 0000 0000 8306 0000 0000 8406 0000 199*57718be8SEnji Cooper0000 200*57718be8SEnji Cooper 201*57718be8SEnji Cooper# 23:18:36.591003 192.168.113.1 > 192.168.113.3: gre [KSAv1] ID:0000 S:7 A:8 ppp: IPCP 12: Conf-Rej(1), IP-Comp VJ-Comp 202*57718be8SEnji Cooper[in,pcn1] 203*57718be8SEnji Cooper4500 0030 5e1d 0000 802f 792c c0a8 7101 c0a8 7103 204*57718be8SEnji Cooper3081 880b 000c 0000 0000 0007 205*57718be8SEnji Cooper0000 0008 8021 0401 000a 0206 002d 0f01 206*57718be8SEnji Cooper 207*57718be8SEnji Cooper# 23:18:36.593819 192.168.113.3 > 192.168.113.1: gre [KSAv1] ID:4000 S:9 A:7 ppp: IPCP 12: Conf-Req(2), IP-Addr=192.168.0.1 208*57718be8SEnji Cooper[out,pcn1] 209*57718be8SEnji Cooper4500 0030 69b4 0000 ff2f ee94 c0a8 7103 c0a8 7101 210*57718be8SEnji Cooper3081 880b 000c 4000 0000 0009 211*57718be8SEnji Cooper0000 0007 8021 0102 000a 0306 c0a8 0001 212*57718be8SEnji Cooper 213*57718be8SEnji Cooper# 23:18:36.594840 192.168.113.1 > 192.168.113.3: gre [KSAv1] ID:0000 S:8 A:9 ppp: CCP 6: Conf-Ack(1) 214*57718be8SEnji Cooper[in,pcn1] 215*57718be8SEnji Cooper4500 002a 5e1e 0000 802f 7931 c0a8 7101 c0a8 7103 216*57718be8SEnji Cooper3081 880b 0006 0000 0000 0008 217*57718be8SEnji Cooper0000 0009 80fd 0201 0004 218*57718be8SEnji Cooper 219*57718be8SEnji Cooper# 23:18:36.595525 192.168.113.1 > 192.168.113.3: gre [KSv1] ID:0000 S:9 ppp: CCP 18: Term-Req(6) 220*57718be8SEnji Cooper[in,pcn1] 221*57718be8SEnji Cooper4500 0032 5e1f 0000 802f 7928 c0a8 7101 c0a8 7103 222*57718be8SEnji Cooper3001 880b 0012 0000 0000 0009 223*57718be8SEnji Cooper80fd 0506 0010 577f 7c5b 003c cd74 0000 224*57718be8SEnji Cooper02dc 225*57718be8SEnji Cooper 226*57718be8SEnji Cooper# 23:18:36.595937 192.168.113.3 > 192.168.113.1: gre [KSAv1] ID:4000 S:10 A:9 ppp: CCP 6: Term-Ack(6) 227*57718be8SEnji Cooper[out,pcn1] 228*57718be8SEnji Cooper4500 002a 69b5 0000 ff2f ee99 c0a8 7103 c0a8 7101 229*57718be8SEnji Cooper3081 880b 0006 4000 0000 000a 230*57718be8SEnji Cooper0000 0009 80fd 0606 0004 231*57718be8SEnji Cooper 232