1*57718be8SEnji Cooper# 23:18:36.130424 192.168.113.1.1511 > 192.168.113.3.1723: S 2884651685:2884651685(0) win 64240 <mss 1460,nop,nop,sackOK> (DF) 2*57718be8SEnji Cooper[in,pcn1=192.168.113.3] 3*57718be8SEnji Cooper4500 0030 5e11 4000 8006 3961 c0a8 7101 c0a8 7103 4*57718be8SEnji Cooper05e7 06bb abf0 4aa5 0000 0000 5*57718be8SEnji Cooper7002 faf0 21a1 0000 0204 05b4 0101 0402 6*57718be8SEnji Cooper 7*57718be8SEnji Cooper# 23:18:36.130778 192.168.113.3.1723 > 192.168.113.1.1511: S 2774821082:2774821082(0) ack 2884651686 win 32768 <mss 1460> (DF) 8*57718be8SEnji Cooper[out,pcn1] 9*57718be8SEnji Cooper4500 002c 69a6 4000 4006 207b 7f00 0001 c0a8 7101 10*57718be8SEnji Cooper06bb 05e7 a564 68da abf0 4aa6 11*57718be8SEnji Cooper6012 8000 55f3 0000 0204 05b4 12*57718be8SEnji Cooper 13*57718be8SEnji Cooper# 23:18:36.130784 192.168.113.1.1511 > 192.168.113.3.1723: P 1:157(156) ack 1 win 64240: pptp CTRL_MSGTYPE=SCCRQ PROTO_VER(1.0) FRAME_CAP(A) BEARER_CAP(A) MAX_CHAN(0) FIRM_REV(2600) HOSTNAME() VENDOR(Microsoft Windows NT) (DF) 14*57718be8SEnji Cooper[in,pcn1] 15*57718be8SEnji Cooper4500 00c4 5e12 4000 8006 38cc c0a8 7101 c0a8 7103 16*57718be8SEnji Cooper05e7 06bb abf0 4aa6 a564 68db 17*57718be8SEnji Cooper5018 faf0 e2a0 0000 009c 0001 1a2b 3c4d 18*57718be8SEnji Cooper0001 0000 0100 0000 0000 0001 0000 0001 19*57718be8SEnji Cooper0000 0a28 0000 0000 0000 0000 0000 0000 20*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 21*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 22*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 23*57718be8SEnji Cooper0000 0000 4d69 6372 6f73 6f66 7420 5769 24*57718be8SEnji Cooper6e64 6f77 7320 4e54 0000 0000 0000 0000 25*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 26*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 27*57718be8SEnji Cooper0000 0000 28*57718be8SEnji Cooper 29*57718be8SEnji Cooper# 23:18:36.260235 192.168.113.3.1723 > 192.168.113.1.1511: P 1:157(156) ack 157 win 33580: pptp CTRL_MSGTYPE=SCCRP PROTO_VER(1.0) RESULT_CODE(1) ERR_CODE(0) FRAME_CAP() BEARER_CAP() MAX_CHAN(1) FIRM_REV(1) HOSTNAME(local) VENDOR(linux) (DF) 30*57718be8SEnji Cooper[out,pcn1] 31*57718be8SEnji Cooper4500 00c4 69a7 4000 4006 1fe2 7f00 0001 c0a8 7101 32*57718be8SEnji Cooper06bb 05e7 a564 68db abf0 4b42 33*57718be8SEnji Cooper5018 832c 817a 0000 009c 0001 1a2b 3c4d 34*57718be8SEnji Cooper0002 0000 0100 0100 0000 0000 0000 0000 35*57718be8SEnji Cooper0001 0001 6c6f 6361 6c00 0000 0000 0000 36*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 37*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 38*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 39*57718be8SEnji Cooper0000 0000 6c69 6e75 7800 0000 0000 0000 40*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 41*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 42*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 43*57718be8SEnji Cooper0000 0000 44*57718be8SEnji Cooper 45*57718be8SEnji Cooper# 23:18:36.260252 192.168.113.1.1511 > 192.168.113.3.1723: P 157:325(168) ack 157 win 64084: pptp CTRL_MSGTYPE=OCRQ CALL_ID(16384) CALL_SER_NUM(4913) MIN_BPS(300) MAX_BPS(100000000) BEARER_TYPE(Any) FRAME_TYPE(E) RECV_WIN(64) PROC_DELAY(0) PHONE_NO_LEN(0) PHONE_NO() SUB_ADDR() (DF) 46*57718be8SEnji Cooper[in,pcn1] 47*57718be8SEnji Cooper4500 00d0 5e13 4000 8006 38bf c0a8 7101 c0a8 7103 48*57718be8SEnji Cooper05e7 06bb abf0 4b42 a564 6977 49*57718be8SEnji Cooper5018 fa54 ac07 0000 00a8 0001 1a2b 3c4d 50*57718be8SEnji Cooper0007 0000 4000 1331 0000 012c 05f5 e100 51*57718be8SEnji Cooper0000 0003 0000 0003 0040 0000 0000 0000 52*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 53*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 54*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 55*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 56*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 57*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 58*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 59*57718be8SEnji Cooper0000 0000 0000 0000 0000 0000 0000 0000 60*57718be8SEnji Cooper 61*57718be8SEnji Cooper# 23:18:36.272856 192.168.113.3.1723 > 192.168.113.1.1511: P 157:189(32) ack 325 win 33580: pptp CTRL_MSGTYPE=OCRP CALL_ID(0) PEER_CALL_ID(16384) RESULT_CODE(1) ERR_CODE(0) CAUSE_CODE(0) CONN_SPEED(100000000) RECV_WIN(64) PROC_DELAY(0) PHY_CHAN_ID(0) (DF) 62*57718be8SEnji Cooper[out,pcn1] 63*57718be8SEnji Cooper4500 0048 69a8 4000 4006 205d 7f00 0001 c0a8 7101 64*57718be8SEnji Cooper06bb 05e7 a564 6977 abf0 4bea 65*57718be8SEnji Cooper5018 832c e9a4 0000 0020 0001 1a2b 3c4d 66*57718be8SEnji Cooper0008 0000 0000 4000 0100 0000 05f5 e100 67*57718be8SEnji Cooper0040 0000 0000 0000 68*57718be8SEnji Cooper 69*57718be8SEnji Cooper# 23:18:36.321819 192.168.113.1.1511 > 192.168.113.3.1723: P 325:349(24) ack 189 win 64052: pptp CTRL_MSGTYPE=SLI PEER_CALL_ID(0) SEND_ACCM(0xffffffff) RECV_ACCM(0xffffffff) (DF) 70*57718be8SEnji Cooper[in,pcn1] 71*57718be8SEnji Cooper4500 0040 5e14 4000 8006 394e c0a8 7101 c0a8 7103 72*57718be8SEnji Cooper05e7 06bb abf0 4bea a564 6997 73*57718be8SEnji Cooper5018 fa34 e810 0000 0018 0001 1a2b 3c4d 74*57718be8SEnji Cooper000f 0000 0000 0000 ffff ffff ffff ffff 75*57718be8SEnji Cooper 76*57718be8SEnji Cooper# 23:18:36.349759 192.168.113.1 > 192.168.113.3: gre [KSv1] ID:0000 S:0 ppp: LCP 25: Conf-Req(0), MRU=1400, Magic-Num=577f7c5b, PFC, ACFC, Call-Back CBCP 77*57718be8SEnji Cooper[in,pcn1] 78*57718be8SEnji Cooper4500 0039 5e15 0000 802f 792b c0a8 7101 c0a8 7103 79*57718be8SEnji Cooper3001 880b 0019 0000 0000 0000 80*57718be8SEnji Cooperff03 c021 0100 0015 0104 0578 0506 577f 81*57718be8SEnji Cooper7c5b 0702 0802 0d03 06 82*57718be8SEnji Cooper 83*57718be8SEnji Cooper# 23:18:36.389970 192.168.113.3 > 192.168.113.1: gre [KAv1] ID:4000 A:4294967295 [|gre] 84*57718be8SEnji Cooper[out,pcn1] 85*57718be8SEnji Cooper4500 0020 69a9 0000 ff2f a15a 7f00 0001 c0a8 7101 86*57718be8SEnji Cooper2081 880b 0000 4000 ffff ffff 87*57718be8SEnji Cooper 88*57718be8SEnji Cooper# 23:18:36.518426 192.168.113.3.1723 > 192.168.113.1.1511: . ack 349 win 33580 (DF) 89*57718be8SEnji Cooper[out,pcn1] 90*57718be8SEnji Cooper4500 0028 69aa 4000 4006 207b 7f00 0001 c0a8 7101 91*57718be8SEnji Cooper06bb 05e7 a564 6997 abf0 4c02 92*57718be8SEnji Cooper5010 832c 686c 0000 93*57718be8SEnji Cooper 94*57718be8SEnji Cooper# 23:18:36.555363 192.168.113.3 > 192.168.113.1: gre [KSv1] ID:4000 S:0 ppp: LCP 24: Conf-Req(1), ACCM=00000000, Magic-Num=22d90cfa, PFC, ACFC 95*57718be8SEnji Cooper[out,pcn1] 96*57718be8SEnji Cooper4500 0038 69ab 0000 ff2f a140 7f00 0001 c0a8 7101 97*57718be8SEnji Cooper3001 880b 0018 4000 0000 0000 98*57718be8SEnji Cooperff03 c021 0101 0014 0206 0000 0000 0506 99*57718be8SEnji Cooper22d9 0cfa 0702 0802 100*57718be8SEnji Cooper 101*57718be8SEnji Cooper# 23:18:36.556030 192.168.113.3 > 192.168.113.1: gre [KSAv1] ID:4000 S:1 A:0 ppp: LCP 11: Conf-Rej(0), Call-Back CBCP 102*57718be8SEnji Cooper[out,pcn1] 103*57718be8SEnji Cooper4500 002f 69ac 0000 ff2f a148 7f00 0001 c0a8 7101 104*57718be8SEnji Cooper3081 880b 000b 4000 0000 0001 105*57718be8SEnji Cooper0000 0000 ff03 c021 0400 0007 0d03 06 106*57718be8SEnji Cooper 107*57718be8SEnji Cooper# 23:18:36.557166 192.168.113.1 > 192.168.113.3: gre [KSAv1] ID:0000 S:1 A:1 ppp: LCP 24: Conf-Ack(1), ACCM=00000000, Magic-Num=22d90cfa, PFC, ACFC 108*57718be8SEnji Cooper[in,pcn1] 109*57718be8SEnji Cooper4500 003c 5e16 0000 802f 7927 c0a8 7101 c0a8 7103 110*57718be8SEnji Cooper3081 880b 0018 0000 0000 0001 111*57718be8SEnji Cooper0000 0001 ff03 c021 0201 0014 0206 0000 112*57718be8SEnji Cooper0000 0506 22d9 0cfa 0702 0802 113*57718be8SEnji Cooper 114*57718be8SEnji Cooper# 23:18:36.557764 192.168.113.1 > 192.168.113.3: gre [KSv1] ID:0000 S:2 ppp: LCP 22: Conf-Req(1), MRU=1400, Magic-Num=577f7c5b, PFC, ACFC 115*57718be8SEnji Cooper[in,pcn1] 116*57718be8SEnji Cooper4500 0036 5e17 0000 802f 792c c0a8 7101 c0a8 7103 117*57718be8SEnji Cooper3001 880b 0016 0000 0000 0002 118*57718be8SEnji Cooperff03 c021 0101 0012 0104 0578 0506 577f 119*57718be8SEnji Cooper7c5b 0702 0802 120*57718be8SEnji Cooper 121*57718be8SEnji Cooper# 23:18:36.564658 192.168.113.3 > 192.168.113.1: gre [KSAv1] ID:4000 S:2 A:2 ppp: LCP 22: Conf-Ack(1), MRU=1400, Magic-Num=577f7c5b, PFC, ACFC 122*57718be8SEnji Cooper[out,pcn1] 123*57718be8SEnji Cooper4500 003a 69ad 0000 ff2f a13c 7f00 0001 c0a8 7101 124*57718be8SEnji Cooper3081 880b 0016 4000 0000 0002 125*57718be8SEnji Cooper0000 0002 ff03 c021 0201 0012 0104 0578 126*57718be8SEnji Cooper0506 577f 7c5b 0702 0802 127*57718be8SEnji Cooper 128*57718be8SEnji Cooper# 23:18:36.564803 192.168.113.3 > 192.168.113.1: gre [KSv1] ID:4000 S:3 ppp: IPCP 18: Conf-Req(1), IP-Addr=192.168.0.1, IP-Comp VJ-Comp 129*57718be8SEnji Cooper[out,pcn1] 130*57718be8SEnji Cooper4500 0032 69ae 0000 ff2f a143 7f00 0001 c0a8 7101 131*57718be8SEnji Cooper3001 880b 0012 4000 0000 0003 132*57718be8SEnji Cooper8021 0101 0010 0306 c0a8 0001 0206 002d 133*57718be8SEnji Cooper0f01 134*57718be8SEnji Cooper 135*57718be8SEnji Cooper# 23:18:36.570395 192.168.113.1.1511 > 192.168.113.3.1723: P 349:373(24) ack 189 win 64052: pptp CTRL_MSGTYPE=SLI PEER_CALL_ID(0) SEND_ACCM(0x00000000) RECV_ACCM(0xffffffff) (DF) 136*57718be8SEnji Cooper[in,pcn1] 137*57718be8SEnji Cooper4500 0040 5e18 4000 8006 394a c0a8 7101 c0a8 7103 138*57718be8SEnji Cooper05e7 06bb abf0 4c02 a564 6997 139*57718be8SEnji Cooper5018 fa34 e7f8 0000 0018 0001 1a2b 3c4d 140*57718be8SEnji Cooper000f 0000 0000 0000 0000 0000 ffff ffff 141*57718be8SEnji Cooper 142*57718be8SEnji Cooper# 23:18:36.573307 192.168.113.1 > 192.168.113.3: gre [KSAv1] ID:0000 S:3 A:3 ppp: LCP 20: Ident(2), Magic-Num=577f7c5b 143*57718be8SEnji Cooper[in,pcn1] 144*57718be8SEnji Cooper4500 0038 5e19 0000 802f 7928 c0a8 7101 c0a8 7103 145*57718be8SEnji Cooper3081 880b 0014 0000 0000 0003 146*57718be8SEnji Cooper0000 0003 c021 0c02 0012 577f 7c5b 4d53 147*57718be8SEnji Cooper5241 5356 352e 3130 148*57718be8SEnji Cooper 149*57718be8SEnji Cooper# 23:18:36.573856 192.168.113.3 > 192.168.113.1: gre [KSAv1] ID:4000 S:4 A:3 ppp: LCP 26: Code-Rej(2) 150*57718be8SEnji Cooper[out,pcn1] 151*57718be8SEnji Cooper4500 003e 69af 0000 ff2f a136 7f00 0001 c0a8 7101 152*57718be8SEnji Cooper3081 880b 001a 4000 0000 0004 153*57718be8SEnji Cooper0000 0003 ff03 c021 0702 0016 0c02 0012 154*57718be8SEnji Cooper577f 7c5b 4d53 5241 5356 352e 3130 155*57718be8SEnji Cooper 156*57718be8SEnji Cooper# 23:18:36.584936 192.168.113.1 > 192.168.113.3: gre [KSAv1] ID:0000 S:4 A:4 ppp: LCP 26: Ident(3), Magic-Num=577f7c5b 157*57718be8SEnji Cooper[in,pcn1] 158*57718be8SEnji Cooper4500 003e 5e1a 0000 802f 7921 c0a8 7101 c0a8 7103 159*57718be8SEnji Cooper3081 880b 001a 0000 0000 0004 160*57718be8SEnji Cooper0000 0004 c021 0c03 0018 577f 7c5b 4d53 161*57718be8SEnji Cooper5241 532d 302d 434c 4159 4d4f 4f52 162*57718be8SEnji Cooper 163*57718be8SEnji Cooper# 23:18:36.585562 192.168.113.3 > 192.168.113.1: gre [KSAv1] ID:4000 S:5 A:4 ppp: LCP 32: Code-Rej(3) 164*57718be8SEnji Cooper[out,pcn1] 165*57718be8SEnji Cooper4500 0044 69b0 0000 ff2f a12f 7f00 0001 c0a8 7101 166*57718be8SEnji Cooper3081 880b 0020 4000 0000 0005 167*57718be8SEnji Cooper0000 0004 ff03 c021 0703 001c 0c03 0018 168*57718be8SEnji Cooper577f 7c5b 4d53 5241 532d 302d 434c 4159 169*57718be8SEnji Cooper4d4f 4f52 170*57718be8SEnji Cooper 171*57718be8SEnji Cooper# 23:18:36.588721 192.168.113.1 > 192.168.113.3: gre [KSAv1] ID:0000 S:5 A:5 ppp: CCP 12: Conf-Req(4), MPPC 172*57718be8SEnji Cooper[in,pcn1] 173*57718be8SEnji Cooper4500 0030 5e1b 0000 802f 792e c0a8 7101 c0a8 7103 174*57718be8SEnji Cooper3081 880b 000c 0000 0000 0005 175*57718be8SEnji Cooper0000 0005 80fd 0104 000a 1206 0100 0001 176*57718be8SEnji Cooper 177*57718be8SEnji Cooper# 23:18:36.589445 192.168.113.3 > 192.168.113.1: gre [KSAv1] ID:4000 S:6 A:5 ppp: CCP 6: Conf-Req(1) 178*57718be8SEnji Cooper[out,pcn1] 179*57718be8SEnji Cooper4500 002a 69b1 0000 ff2f a148 7f00 0001 c0a8 7101 180*57718be8SEnji Cooper3081 880b 0006 4000 0000 0006 181*57718be8SEnji Cooper0000 0005 80fd 0101 0004 182*57718be8SEnji Cooper 183*57718be8SEnji Cooper# 23:18:36.589540 192.168.113.3 > 192.168.113.1: gre [KSv1] ID:4000 S:7 ppp: CCP 12: Conf-Rej(4), MPPC 184*57718be8SEnji Cooper[out,pcn1] 185*57718be8SEnji Cooper4500 002c 69b2 0000 ff2f a145 7f00 0001 c0a8 7101 186*57718be8SEnji Cooper3001 880b 000c 4000 0000 0007 187*57718be8SEnji Cooper80fd 0404 000a 1206 0100 0001 188*57718be8SEnji Cooper 189*57718be8SEnji Cooper# 23:18:36.590023 192.168.113.1 > 192.168.113.3: gre [KSAv1] ID:0000 S:6 A:7 ppp: IPCP 36: Conf-Req(5), IP-Addr=0.0.0.0, Pri-DNS=0.0.0.0, Pri-NBNS=0.0.0.0, Sec-DNS=0.0.0.0, Sec-NBNS=0.0.0.0 190*57718be8SEnji Cooper[in,pcn1] 191*57718be8SEnji Cooper4500 0048 5e1c 0000 802f 7915 c0a8 7101 c0a8 7103 192*57718be8SEnji Cooper3081 880b 0024 0000 0000 0006 193*57718be8SEnji Cooper0000 0007 8021 0105 0022 0306 0000 0000 194*57718be8SEnji Cooper8106 0000 0000 8206 0000 0000 8306 0000 195*57718be8SEnji Cooper0000 8406 0000 0000 196*57718be8SEnji Cooper 197*57718be8SEnji Cooper# 23:18:36.590489 192.168.113.3 > 192.168.113.1: gre [KSAv1] ID:4000 S:8 A:6 ppp: IPCP 30: Conf-Rej(5), Pri-DNS=0.0.0.0, Pri-NBNS=0.0.0.0, Sec-DNS=0.0.0.0, Sec-NBNS=0.0.0.0 198*57718be8SEnji Cooper[out,pcn1] 199*57718be8SEnji Cooper4500 0042 69b3 0000 ff2f a12e 7f00 0001 c0a8 7101 200*57718be8SEnji Cooper3081 880b 001e 4000 0000 0008 201*57718be8SEnji Cooper0000 0006 8021 0405 001c 8106 0000 0000 202*57718be8SEnji Cooper8206 0000 0000 8306 0000 0000 8406 0000 203*57718be8SEnji Cooper0000 204*57718be8SEnji Cooper 205*57718be8SEnji Cooper# 23:18:36.591003 192.168.113.1 > 192.168.113.3: gre [KSAv1] ID:0000 S:7 A:8 ppp: IPCP 12: Conf-Rej(1), IP-Comp VJ-Comp 206*57718be8SEnji Cooper[in,pcn1] 207*57718be8SEnji Cooper4500 0030 5e1d 0000 802f 792c c0a8 7101 c0a8 7103 208*57718be8SEnji Cooper3081 880b 000c 0000 0000 0007 209*57718be8SEnji Cooper0000 0008 8021 0401 000a 0206 002d 0f01 210*57718be8SEnji Cooper 211*57718be8SEnji Cooper# 23:18:36.593819 192.168.113.3 > 192.168.113.1: gre [KSAv1] ID:4000 S:9 A:7 ppp: IPCP 12: Conf-Req(2), IP-Addr=192.168.0.1 212*57718be8SEnji Cooper[out,pcn1] 213*57718be8SEnji Cooper4500 0030 69b4 0000 ff2f a13f 7f00 0001 c0a8 7101 214*57718be8SEnji Cooper3081 880b 000c 4000 0000 0009 215*57718be8SEnji Cooper0000 0007 8021 0102 000a 0306 c0a8 0001 216*57718be8SEnji Cooper 217*57718be8SEnji Cooper# 23:18:36.594840 192.168.113.1 > 192.168.113.3: gre [KSAv1] ID:0000 S:8 A:9 ppp: CCP 6: Conf-Ack(1) 218*57718be8SEnji Cooper[in,pcn1] 219*57718be8SEnji Cooper4500 002a 5e1e 0000 802f 7931 c0a8 7101 c0a8 7103 220*57718be8SEnji Cooper3081 880b 0006 0000 0000 0008 221*57718be8SEnji Cooper0000 0009 80fd 0201 0004 222*57718be8SEnji Cooper 223*57718be8SEnji Cooper# 23:18:36.595525 192.168.113.1 > 192.168.113.3: gre [KSv1] ID:0000 S:9 ppp: CCP 18: Term-Req(6) 224*57718be8SEnji Cooper[in,pcn1] 225*57718be8SEnji Cooper4500 0032 5e1f 0000 802f 7928 c0a8 7101 c0a8 7103 226*57718be8SEnji Cooper3001 880b 0012 0000 0000 0009 227*57718be8SEnji Cooper80fd 0506 0010 577f 7c5b 003c cd74 0000 228*57718be8SEnji Cooper02dc 229*57718be8SEnji Cooper 230*57718be8SEnji Cooper# 23:18:36.595937 192.168.113.3 > 192.168.113.1: gre [KSAv1] ID:4000 S:10 A:9 ppp: CCP 6: Term-Ack(6) 231*57718be8SEnji Cooper[out,pcn1] 232*57718be8SEnji Cooper4500 002a 69b5 0000 ff2f a144 7f00 0001 c0a8 7101 233*57718be8SEnji Cooper3081 880b 0006 4000 0000 000a 234*57718be8SEnji Cooper0000 0009 80fd 0606 0004 235*57718be8SEnji Cooper 236