Onderwerp: Broadcast-"vervuiling" op netwerk

Tcpdump van enkele seconden...

07:26:48.585639 IP panoramix.it2go-panoramix.net.39003 > 193.34.91.111.domain: 18293+ PTR? 129.91.34.193.in-addr.arpa. (44)
07:26:48.591032 IP 193.34.91.111.domain > panoramix.it2go-panoramix.net.39003: 18293 NXDomain 0/1/0 (98)
07:26:48.591194 IP panoramix.it2go-panoramix.net.39003 > 193.34.91.111.domain: 33276+ PTR? 14.39.224.202.in-addr.arpa. (44)
07:26:48.592306 IP panoramix.it2go-panoramix.net > shared001.synssans.nl: ICMP echo request, id 16990, seq 25344, length 64
07:26:48.596030 IP d54C57F8A.access.telenet.be.64257 > panoramix.it2go-panoramix.net.ssh: . ack 40036 win 65079
07:26:48.596046 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: . 41104:42564(1460) ack 225 win 8576
07:26:48.596049 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 42564:43020(456) ack 225 win 8576
07:26:48.596053 IP d54C57F8A.access.telenet.be.64257 > panoramix.it2go-panoramix.net.ssh: . ack 40812 win 64303
07:26:48.600027 IP shared001.synssans.nl > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 25344, length 64
07:26:48.612223 IP panoramix.it2go-panoramix.net > 193.34.90.45: ICMP echo request, id 16990, seq 25600, length 64
07:26:48.612770 IP 193.34.90.45 > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 25600, length 64
07:26:48.624013 IP d54C57F8A.access.telenet.be.64257 > panoramix.it2go-panoramix.net.ssh: . ack 42564 win 65535
07:26:48.632218 IP panoramix.it2go-panoramix.net > 193.111.95.33.static.hosted.by.combell.com: ICMP echo request, id 16990, seq 25856, length 64
07:26:48.634756 IP 193.111.95.33.static.hosted.by.combell.com > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 25856, length 64
07:26:48.642237 IP panoramix.it2go-panoramix.net > d54C57F8A.access.telenet.be: ICMP echo request, id 16990, seq 26112, length 64
07:26:49.408110 IP panoramix.it2go-panoramix.net.39003 > 193.34.91.111.domain: 23521+ PTR? 1.236.194.91.in-addr.arpa. (43)
07:26:49.412175 IP panoramix.it2go-panoramix.net > www.scarlet.be: ICMP echo request, id 16990, seq 36864, length 64
07:26:49.416491 IP panoramix.it2go-panoramix.net.39003 > 193.34.91.111.domain: 26034+ PTR? 3.225.67.217.in-addr.arpa. (43)
07:26:49.422195 IP panoramix.it2go-panoramix.net > dd15408.kasserver.com: ICMP echo request, id 16990, seq 37120, length 64
07:26:49.450922 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 43692:43856(164) ack 277 win 8576
07:26:49.450990 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 43856:44116(260) ack 277 win 8576
07:26:49.451093 IP panoramix.it2go-panoramix.net.39003 > 193.34.91.111.domain: 43844+ PTR? 141.144.176.193.in-addr.arpa. (46)
07:26:49.452249 IP panoramix.it2go-panoramix.net > www.cantv.net: ICMP echo request, id 16990, seq 37632, length 64
07:26:49.453516 IP d54C57F8A.access.telenet.be.64257 > panoramix.it2go-panoramix.net.ssh: . ack 43692 win 64407
07:26:49.468651 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 44408:44572(164) ack 277 win 8576
07:26:49.468748 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 44572:44832(260) ack 277 win 8576
07:26:49.468856 IP panoramix.it2go-panoramix.net.39003 > 193.34.91.111.domain: 7462+ PTR? 1.0.78.194.in-addr.arpa. (41)
07:26:49.471883 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 45124:45304(180) ack 277 win 8576
07:26:49.471989 IP panoramix.it2go-panoramix.net.39003 > 193.34.91.111.domain: 42911+ PTR? 27.145.92.85.in-addr.arpa. (43)
07:26:49.472218 IP panoramix.it2go-panoramix.net > portal.tiscali.dk: ICMP echo request, id 16990, seq 0, length 64
07:26:49.474753 arp who-has 83-217-73-101.realroot.be tell 83-217-73-75.realroot.be
07:26:49.500899 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 45744:45908(164) ack 277 win 8576
07:26:49.511110 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 46072:46252(180) ack 277 win 8576
07:26:49.511201 IP panoramix.it2go-panoramix.net.39003 > 193.34.91.111.domain: 58170+ PTR? 24.162.130.213.in-addr.arpa. (45)
07:26:49.537639 IP panoramix.it2go-panoramix.net.39003 > 193.34.91.111.domain: 17671+ PTR? 4.190.130.213.in-addr.arpa. (44)
07:26:49.544369 IP panoramix.it2go-panoramix.net.39003 > 193.34.91.111.domain: 36844+ PTR? 1.160.18.81.in-addr.arpa. (42)
07:26:49.577475 IP panoramix.it2go-panoramix.net.39003 > 193.34.91.111.domain: 11688+ PTR? 147.183.233.64.in-addr.arpa. (45)
07:26:49.582188 IP panoramix.it2go-panoramix.net > www.servage.net: ICMP echo request, id 16990, seq 1536, length 64
07:26:49.844969 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 47232:47396(164) ack 277 win 8576
07:26:49.845031 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 47396:47800(404) ack 277 win 8576
07:26:49.845183 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 48332:48496(164) ack 277 win 8576
07:26:49.845219 IP panoramix.it2go-panoramix.net.39003 > 193.34.91.111.domain: 25459+ PTR? 146.199.26.212.in-addr.arpa. (45)
07:26:49.851972 IP panoramix.it2go-panoramix.net.39003 > 193.34.91.111.domain: 50552+ PTR? 60.133.150.82.in-addr.arpa. (44)
07:26:49.852214 IP panoramix.it2go-panoramix.net > helpdesk.bbeyond.nl: ICMP echo request, id 16990, seq 5632, length 64
07:26:49.870114 IP panoramix.it2go-panoramix.net.39003 > 193.34.91.111.domain: 18773+ PTR? 3.138.6.149.in-addr.arpa. (42)
07:26:49.871018 IP prayer.init7.net > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 5376, length 64
07:26:50.275544 IP panoramix.it2go-panoramix.net.39003 > 193.34.91.111.domain: 53183+ PTR? 132.24.238.193.in-addr.arpa. (45)
07:26:50.303658 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 49328:49492(164) ack 277 win 8576
07:26:50.303754 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 49492:49896(404) ack 277 win 8576
07:27:00.304297 IP panoramix.it2go-panoramix.net.39004 > 193.34.91.111.domain: 45488+ PTR? 20.68.71.80.in-addr.arpa. (42)
07:27:00.307504 IP ge-www.vivor.net > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 11776, length 64
07:27:00.327302 IP panoramix.it2go-panoramix.net.39004 > 193.34.91.111.domain: 28966+ PTR? 40.128.212.62.in-addr.arpa. (44)
07:27:00.331488 IP panoramix.it2go-panoramix.net > fw.office.netland.nl: ICMP echo request, id 16990, seq 12288, length 64
07:27:00.336490 IP fw.office.netland.nl > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 12288, length 64
07:27:00.462059 IP panoramix.it2go-panoramix.net.39004 > 193.34.91.111.domain: 33135+ PTR? 65.96.194.217.in-addr.arpa. (44)
07:27:00.462197 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 50916:52008(1092) ack 277 win 8576
07:27:00.471543 IP panoramix.it2go-panoramix.net > 217.19.16.1: ICMP echo request, id 16990, seq 14336, length 64
07:27:00.475406 IP 193.34.91.111.domain > panoramix.it2go-panoramix.net.39004: 33135 1/2/0 (107)
07:27:00.475784 IP panoramix.it2go-panoramix.net.39004 > 193.34.91.111.domain: 369+ PTR? 41.55.88.85.in-addr.arpa. (42)
07:27:00.475931 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 52008:53036(1028) ack 277 win 8576
07:27:00.491557 IP panoramix.it2go-panoramix.net > rr-web.realroot.be: ICMP echo request, id 16990, seq 14592, length 64
07:27:00.492891 IP rr-web.realroot.be > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 14592, length 64
07:27:00.497892 IP gohan.multi.fi > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 14080, length 64
07:27:00.502141 IP 193.34.91.111.domain > panoramix.it2go-panoramix.net.39004: 369 1/2/2 PTR[|domain]
07:27:00.502637 IP d54C57F8A.access.telenet.be.64257 > panoramix.it2go-panoramix.net.ssh: . ack 53036 win 65535
07:27:00.503235 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: . 53036:55956(2920) ack 277 win 8576
07:27:00.503247 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 55956:57184(1228) ack 277 win 8576
07:27:00.504022 IP panoramix.it2go-panoramix.net.39004 > 193.34.91.111.domain: 29124+ PTR? 29.90.34.193.in-addr.arpa. (43)
07:27:00.509635 IP 193.34.91.111.domain > panoramix.it2go-panoramix.net.39004: 29124 NXDomain 0/1/0 (97)
07:27:00.509814 IP panoramix.it2go-panoramix.net.39004 > 193.34.91.111.domain: 41216+ PTR? 1.90.34.193.in-addr.arpa. (42)
07:27:00.511406 IP panoramix.it2go-panoramix.net > 85.234.192.11: ICMP echo request, id 16990, seq 14848, length 64
07:27:00.515632 IP 193.34.91.111.domain > panoramix.it2go-panoramix.net.39004: 41216 NXDomain 0/1/0 (96)
07:27:00.515918 IP panoramix.it2go-panoramix.net.39004 > 193.34.91.111.domain: 27984+ PTR? 22.210.122.148.in-addr.arpa. (45)
07:27:00.516133 IP d54C57F8A.access.telenet.be.64257 > panoramix.it2go-panoramix.net.ssh: . ack 55956 win 65535
07:27:00.516152 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: . 57184:60104(2920) ack 277 win 8576
07:27:00.516157 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 60104:61160(1056) ack 277 win 8576
07:27:00.521464 IP panoramix.it2go-panoramix.net > www.uniweb.be: ICMP echo request, id 16990, seq 15104, length 64
07:27:00.522623 IP www.uniweb.be > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 15104, length 64
07:27:00.527623 IP xenco.net > VRRP.MCAST.NET: VRRPv2, Advertisement, vrid 1, prio 240, authtype #50, intvl 1s, length 36
07:27:00.532121 CDPv2, ttl: 180s, Device-ID 'Switch'[|cdp]
07:27:00.541466 IP panoramix.it2go-panoramix.net > j-ramp.vuurwerk.nl: ICMP echo request, id 16990, seq 15360, length 64
07:27:00.550112 IP d54C57F8A.access.telenet.be.64257 > panoramix.it2go-panoramix.net.ssh: . ack 58644 win 65535
07:27:00.550132 IP d54C57F8A.access.telenet.be.64257 > panoramix.it2go-panoramix.net.ssh: . ack 61160 win 65535
07:27:00.551577 IP panoramix.it2go-panoramix.net > orpheus.cuci.nl: ICMP echo request, id 16990, seq 15616, length 64
07:27:00.554856 IP j-ramp.vuurwerk.nl > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 15360, length 64
07:27:00.564103 IP orpheus.cuci.nl > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 15616, length 64
07:27:00.571535 IP panoramix.it2go-panoramix.net > trance.probe-networks.de: ICMP echo request, id 16990, seq 15872, length 64
07:27:00.583592 IP trance.probe-networks.de > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 15872, length 64
07:27:00.591515 IP panoramix.it2go-panoramix.net > 217.150.156.17: ICMP echo request, id 16990, seq 16128, length 64
07:27:00.601559 IP panoramix.it2go-panoramix.net > www.indiana.edu: ICMP echo request, id 16990, seq 16384, length 64
07:27:00.610324 IP research.Sun.COM > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 13824, length 64
07:27:00.619319 IP shoot.pacific.net.au > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 11264, length 64
07:27:00.631415 IP panoramix.it2go-panoramix.net > corp-www.unilogicnetworks.net: ICMP echo request, id 16990, seq 16640, length 64
07:27:00.641463 IP panoramix.it2go-panoramix.net > nl.netlog.com: ICMP echo request, id 16990, seq 16896, length 64
07:27:00.642054 IP corp-www.unilogicnetworks.net > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 16640, length 64
07:27:00.642550 IP nl.netlog.com > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 16896, length 64
07:27:00.651520 IP panoramix.it2go-panoramix.net > www.chello.nl: ICMP echo request, id 16990, seq 17152, length 64
07:27:00.653297 IP 193.34.91.111.domain > panoramix.it2go-panoramix.net.39004: 27984 1/2/0 (125)
07:27:00.653617 IP panoramix.it2go-panoramix.net.39004 > 193.34.91.111.domain: 13812+ PTR? 103.89.34.193.in-addr.arpa. (44)
07:27:00.656797 IP www.chello.nl > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 17152, length 64
07:27:00.659043 IP 193.34.91.111.domain > panoramix.it2go-panoramix.net.39004: 13812 NXDomain 0/1/0 (98)
07:27:00.659223 IP panoramix.it2go-panoramix.net.39004 > 193.34.91.111.domain: 18826+ PTR? 1.89.34.193.in-addr.arpa. (42)
07:27:00.664545 IP 193.34.91.111.domain > panoramix.it2go-panoramix.net.39004: 18826 NXDomain 0/1/0 (96)
07:27:00.664795 IP panoramix.it2go-panoramix.net.39004 > 193.34.91.111.domain: 48605+ PTR? 10.190.22.194.in-addr.arpa. (44)
07:27:00.671456 IP panoramix.it2go-panoramix.net > www.proserve.nl: ICMP echo request, id 16990, seq 17408, length 64
07:27:00.678286 IP www.proserve.nl > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 17408, length 64
07:27:00.691449 IP panoramix.it2go-panoramix.net > sheppard1.torfree.net: ICMP echo request, id 16990, seq 17664, length 64
07:27:00.701538 IP panoramix.it2go-panoramix.net > 193.34.91.86: ICMP echo request, id 16990, seq 17920, length 64
07:27:00.701773 IP 193.34.91.86 > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 17920, length 64
07:27:00.711579 IP panoramix.it2go-panoramix.net > www.nxs.nl: ICMP echo request, id 16990, seq 18176, length 64
07:27:00.713759 IP www.indiana.edu > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 16384, length 64
07:27:00.717258 IP www.nxs.nl > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 18176, length 64
07:27:00.731443 IP panoramix.it2go-panoramix.net > ns1.nerdnet.nl: ICMP echo request, id 16990, seq 18432, length 64
07:27:00.736750 IP ns1.nerdnet.nl > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 18432, length 64
07:27:00.751447 IP panoramix.it2go-panoramix.net > 83.98.147.3: ICMP echo request, id 16990, seq 18688, length 64
07:27:00.771450 IP panoramix.it2go-panoramix.net > win2k3host01.globalserve.be: ICMP echo request, id 16990, seq 18944, length 64
07:27:00.775471 IP win2k3host01.globalserve.be > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 18944, length 64
07:27:00.787963 IP sheppard1.torfree.net > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 17664, length 64
07:27:00.791372 IP panoramix.it2go-panoramix.net > www.rendez-vous.be: ICMP echo request, id 16990, seq 19200, length 64
07:27:00.793209 IP www.rendez-vous.be > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 19200, length 64
07:27:00.799455 IP 193.34.91.111.domain > panoramix.it2go-panoramix.net.39004: 48605 1/2/2 (146)
07:27:00.799874 IP panoramix.it2go-panoramix.net.39004 > 193.34.91.111.domain: 25356+ PTR? 53.198.190.193.in-addr.arpa. (45)
07:27:00.808201 IP 193.34.91.111.domain > panoramix.it2go-panoramix.net.39004: 25356 1/2/3 (176)
07:27:00.811371 IP panoramix.it2go-panoramix.net > 193.34.91.111: ICMP echo request, id 16990, seq 19456, length 64
07:27:00.811698 IP 193.34.91.111 > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 19456, length 64
07:27:00.824941 IP d54C57F8A.access.telenet.be.64257 > panoramix.it2go-panoramix.net.ssh: P 277:329(52) ack 53036 win 65535
07:27:00.824953 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: . ack 329 win 8576
07:27:00.825066 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 61160:61596(436) ack 329 win 8576
07:27:00.825324 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: . 61596:64516(2920) ack 329 win 8576
07:27:00.831397 IP panoramix.it2go-panoramix.net > www.internetworx.nl: ICMP echo request, id 16990, seq 19712, length 64
07:27:00.841683 IP d54C57F8A.access.telenet.be.64257 > panoramix.it2go-panoramix.net.ssh: . ack 64516 win 65535
07:27:00.841701 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: . 64516:68896(4380) ack 329 win 8576
07:27:00.841707 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 68896:70052(1156) ack 329 win 8576
07:27:00.843929 IP www.internetworx.nl > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 19712, length 64
07:27:00.851368 IP panoramix.it2go-panoramix.net > tommie.io.nl: ICMP echo request, id 16990, seq 19968, length 64
07:27:00.855922 IP tommie.io.nl > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 19968, length 64
07:27:00.861429 IP panoramix.it2go-panoramix.net > wsunet.umdc.umu.se: ICMP echo request, id 16990, seq 20224, length 64
07:27:00.865916 IP d54C57F8A.access.telenet.be.64257 > panoramix.it2go-panoramix.net.ssh: . ack 67436 win 65535
07:27:00.870163 IP d54C57F8A.access.telenet.be.64257 > panoramix.it2go-panoramix.net.ssh: . ack 70052 win 65535
07:27:00.877659 IP 10ge3-1-0-19.gc.as25232.net > panoramix.it2go-panoramix.net: ICMP host 83.98.143.12 unreachable, length 36
07:27:00.877910 IP 10ge3-1-0-19.gc.as25232.net > panoramix.it2go-panoramix.net: ICMP host 83.98.143.12 unreachable, length 36
07:27:00.881365 IP panoramix.it2go-panoramix.net > www.easynet.com: ICMP echo request, id 16990, seq 20480, length 64
07:27:00.888152 IP www.easynet.com > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 20480, length 64
07:27:00.901361 IP panoramix.it2go-panoramix.net > srv03.netfeed.nl: ICMP echo request, id 16990, seq 20736, length 64
07:27:00.901397 IP wsunet.umdc.umu.se > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 20224, length 64
07:27:00.916387 IP srv03.netfeed.nl > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 20736, length 64
07:27:00.921358 IP panoramix.it2go-panoramix.net > kanegon.asahi-net.or.jp: ICMP echo request, id 16990, seq 20992, length 64
07:27:00.941356 IP panoramix.it2go-panoramix.net > 91.194.236.1: ICMP echo request, id 16990, seq 21248, length 64
07:27:00.942371 IP 91.194.236.1 > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 21248, length 64
07:27:00.961366 IP panoramix.it2go-panoramix.net > grafix.nl: ICMP echo request, id 16990, seq 21504, length 64
07:27:00.971853 IP grafix.nl > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 21504, length 64
07:27:00.981350 IP panoramix.it2go-panoramix.net > gw3.domain-registry.nl: ICMP echo request, id 16990, seq 21760, length 64
07:27:01.001351 IP panoramix.it2go-panoramix.net > bigcore1.02bnc.skynet.be: ICMP echo request, id 16990, seq 22016, length 64
07:27:01.002833 IP bigcore1.02bnc.skynet.be > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 22016, length 64
07:27:01.021377 IP panoramix.it2go-panoramix.net > s01.cne.nl: ICMP echo request, id 16990, seq 22272, length 64
07:27:01.028819 IP s01.cne.nl > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 22272, length 64
07:27:01.041359 IP panoramix.it2go-panoramix.net > webcontent2-vip.telenet-ops.be: ICMP echo request, id 16990, seq 22528, length 64
07:27:01.044059 IP webcontent2-vip.telenet-ops.be > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 22528, length 64
07:27:01.061349 IP panoramix.it2go-panoramix.net > www.deorganisatie.net: ICMP echo request, id 16990, seq 22784, length 64
07:27:01.066046 IP 213.130.190.4 > panoramix.it2go-panoramix.net: ICMP host www.deorganisatie.net unreachable, length 36
07:27:01.081359 IP panoramix.it2go-panoramix.net > ge3-1-0.rtr3-rtd-cap.caveo.nl: ICMP echo request, id 16990, seq 23040, length 64
07:27:01.086784 IP ge3-1-0.rtr3-rtd-cap.caveo.nl > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 23040, length 64
07:27:01.101345 IP panoramix.it2go-panoramix.net > nf-in-f147.google.com: ICMP echo request, id 16990, seq 23296, length 64
07:27:01.115516 IP nf-in-f147.google.com > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 23296, length 64
07:27:01.121344 IP panoramix.it2go-panoramix.net > www.solcon.nl: ICMP echo request, id 16990, seq 23552, length 64
07:27:01.129008 IP www.solcon.nl > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 23552, length 64
07:27:01.141344 IP panoramix.it2go-panoramix.net > shared1.adixhosting.nl: ICMP echo request, id 16990, seq 23808, length 64
07:27:01.145998 IP d54C57F8A.access.telenet.be.64257 > panoramix.it2go-panoramix.net.ssh: P 329:381(52) ack 61596 win 65099
07:27:01.146123 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 70052:70280(228) ack 381 win 8576
07:27:01.146379 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: . 70280:73200(2920) ack 381 win 8576
07:27:01.146692 IP panoramix.it2go-panoramix.net.39004 > 193.34.91.111.domain: 45513+ PTR? 30.71.74.193.in-addr.arpa. (43)
07:27:01.148747 IP 193.34.91.111.domain > panoramix.it2go-panoramix.net.39004: 45513 1/3/3 (182)
07:27:01.149213 IP panoramix.it2go-panoramix.net.39004 > 193.34.91.111.domain: 45053+ PTR? 101.73.217.83.in-addr.arpa. (44)
07:27:01.150245 IP shared1.adixhosting.nl > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 23808, length 64
07:27:01.156992 IP 193.34.91.111.domain > panoramix.it2go-panoramix.net.39004: 45053 1/2/2 (163)
07:27:01.157099 IP panoramix.it2go-panoramix.net.39004 > 193.34.91.111.domain: 3496+ PTR? 75.73.217.83.in-addr.arpa. (43)
07:27:01.159244 IP 193.34.91.111.domain > panoramix.it2go-panoramix.net.39004: 3496 1/2/2 (161)
07:27:01.161359 IP panoramix.it2go-panoramix.net > ns1.benesol.be: ICMP echo request, id 16990, seq 24064, length 64
07:27:01.163237 arp who-has 83-217-73-160.realroot.be tell 83-217-73-75.realroot.be
07:27:01.163737 IP ns1.benesol.be > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 24064, length 64
07:27:01.174481 IP d54C57F8A.access.telenet.be.64257 > panoramix.it2go-panoramix.net.ssh: . ack 73200 win 65535
07:27:01.174498 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: . 73200:77580(4380) ack 381 win 8576
07:27:01.174503 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 77580:78964(1384) ack 381 win 8576
07:27:01.181343 IP panoramix.it2go-panoramix.net > 202.46.224.165: ICMP echo request, id 16990, seq 24320, length 64
07:27:01.187223 IP d54C57F8A.access.telenet.be.64257 > panoramix.it2go-panoramix.net.ssh: . ack 76120 win 65535
07:27:01.191720 IP d54C57F8A.access.telenet.be.64257 > panoramix.it2go-panoramix.net.ssh: . ack 78964 win 65535
07:27:01.191969 IP kanegon.asahi-net.or.jp > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 20992, length 64
07:27:01.201342 IP panoramix.it2go-panoramix.net > 212.26.199.146: ICMP echo request, id 16990, seq 24576, length 64
07:27:01.213209 IP 212.26.199.146 > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 24576, length 64
07:27:01.221336 IP panoramix.it2go-panoramix.net > srv01.rbs.ams.instantxs.nl: ICMP echo request, id 16990, seq 24832, length 64
07:27:01.261382 IP panoramix.it2go-panoramix.net > shared001.synssans.nl: ICMP echo request, id 16990, seq 25344, length 64
07:27:01.269182 IP shared001.synssans.nl > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 25344, length 64
07:27:01.281343 IP panoramix.it2go-panoramix.net > 193.34.90.45: ICMP echo request, id 16990, seq 25600, length 64
07:27:01.288662 IP 193.34.90.45 > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 25600, length 64
07:27:01.301330 IP panoramix.it2go-panoramix.net > 193.111.95.33.static.hosted.by.combell.com: ICMP echo request, id 16990, seq 25856, length 64
07:27:01.304152 IP 193.111.95.33.static.hosted.by.combell.com > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 25856, length 64
07:27:01.321368 IP panoramix.it2go-panoramix.net > d54C57F8A.access.telenet.be: ICMP echo request, id 16990, seq 26112, length 64
07:27:01.341327 IP panoramix.it2go-panoramix.net > HOSTED-BY.megaprovider.nl: ICMP echo request, id 16990, seq 26368, length 64
07:27:01.361328 IP panoramix.it2go-panoramix.net > asterix.it2go-asterix.net: ICMP echo request, id 16990, seq 26624, length 64
07:27:01.361618 IP asterix.it2go-asterix.net > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 26624, length 64
07:27:01.371381 IP panoramix.it2go-panoramix.net > www.xenosite.net: ICMP echo request, id 16990, seq 26880, length 64
07:27:01.375860 IP www.xenosite.net > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 26880, length 64
07:27:01.391328 IP panoramix.it2go-panoramix.net > ns1.cw-access.com: ICMP echo request, id 16990, seq 27136, length 64
07:27:01.407341 IP ns1.cw-access.com > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 27136, length 64
07:27:01.411322 IP panoramix.it2go-panoramix.net > hotell-redsys.nextel.no: ICMP echo request, id 16990, seq 27392, length 64
07:27:01.421343 IP panoramix.it2go-panoramix.net > www.tweakers.net: ICMP echo request, id 16990, seq 27648, length 64
07:27:01.424330 IP d54C57F8A.access.telenet.be.64257 > panoramix.it2go-panoramix.net.ssh: P 381:433(52) ack 70280 win 65307
07:27:01.424454 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 78964:79224(260) ack 433 win 8576
07:27:01.424709 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: . 79224:80684(1460) ack 433 win 8576
07:27:01.424720 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: . 80684:82144(1460) ack 433 win 8576
07:27:01.424724 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 82144:83372(1228) ack 433 win 8576
07:27:01.424851 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 83372:84656(1284) ack 433 win 8576
07:27:01.431578 IP www.tweakers.net > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 27648, length 64
07:27:01.438322 IP hotell-redsys.nextel.no > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 27392, length 64
07:27:01.441385 IP panoramix.it2go-panoramix.net > hosted-by.trans-ix.com: ICMP echo request, id 16990, seq 27904, length 64
07:27:01.448316 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:b0:64:20:12:40 (oui Unknown), length 300
07:27:01.461322 IP panoramix.it2go-panoramix.net > 83.98.143.2: ICMP echo request, id 16990, seq 28160, length 64
07:27:01.467555 IP d54C57F8A.access.telenet.be.64257 > panoramix.it2go-panoramix.net.ssh: . ack 82144 win 65535
07:27:01.467572 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: . 84656:86116(1460) ack 433 win 8576
07:27:01.467576 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 86116:86704(588) ack 433 win 8576
07:27:01.467581 IP d54C57F8A.access.telenet.be.64257 > panoramix.it2go-panoramix.net.ssh: . ack 84656 win 65535
07:27:01.467607 IP panoramix.it2go-panoramix.net.ssh > d54C57F8A.access.telenet.be.64257: P 86704:87644(940) ack 433 win 8576
07:27:01.481389 IP panoramix.it2go-panoramix.net > 62.213.203.153: ICMP echo request, id 16990, seq 28416, length 64
07:27:01.482546 IP 62.213.203.153 > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 28416, length 64
07:27:01.483295 IP d54C57F8A.access.telenet.be.64257 > panoramix.it2go-panoramix.net.ssh: . ack 86704 win 65535
07:27:01.501339 IP panoramix.it2go-panoramix.net > www.dns.be: ICMP echo request, id 16990, seq 28672, length 64
07:27:01.503034 IP www.dns.be > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 28672, length 64
07:27:01.521313 IP panoramix.it2go-panoramix.net > www.we-dare.net: ICMP echo request, id 16990, seq 28928, length 64
07:27:01.531017 IP www.we-dare.net > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 28928, length 64
07:27:01.541344 IP panoramix.it2go-panoramix.net > green.plant.nl: ICMP echo request, id 16990, seq 29184, length 64
07:27:01.544259 IP loadbalancer01.bebru2.unix-solutions.be > VRRP.MCAST.NET: VRRPv2, Advertisement, vrid 1, prio 150, authtype simple, intvl 1s, length 20
07:27:01.547256 IP green.plant.nl > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 29184, length 64
07:27:01.557252 IP 202.46.224.165 > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 24320, length 64
07:27:01.561337 IP panoramix.it2go-panoramix.net > primary.webhostingtalk.nl: ICMP echo request, id 16990, seq 29440, length 64
07:27:01.571493 IP primary.webhostingtalk.nl > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 29440, length 64
07:27:01.581312 IP panoramix.it2go-panoramix.net > 62.27.45.170: ICMP echo request, id 16990, seq 29696, length 64
07:27:01.591357 IP panoramix.it2go-panoramix.net > cologate.rb.eweka.nl: ICMP echo request, id 16990, seq 29952, length 64
07:27:01.599725 IP 62.27.45.170 > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 29696, length 64
07:27:01.600225 IP cologate.rb.eweka.nl > panoramix.it2go-panoramix.net: ICMP echo reply, id 16990, seq 29952, length 64
07:27:01.611314 IP panoramix.it2go-panoramix.net > pinky.notnet.co.uk: ICMP echo request, id 16990, seq 30208, length 64
07:27:01.620463 IP 193.34.90.15 > 224.0.0.251: igmp v2 report 224.0.0.251

Dankzij tcpdump heb ik idd die realroot dingen teruggevonden, en idd ARP traffic!

09:38:42.746239 arp who-has 83-217-73-86.realroot.be tell 83-217-73-75.realroot.be
09:38:42.750237 arp who-has 217-22-62-239.realroot.be tell 217-22-62-30.realroot.be
09:38:42.750892 arp who-has 193.34.89.22 tell 193.34.89.1

Met TCPdump kan je ook expressions mee geven over wat je wilt zien;
tcpdump -i eth0 proto arp
geeft je alleen het ARP traffic.
Op zich ziet het er nu niet naar uit dat er extreem veel realroot.be ARP packets zijn.

Het valt me wel op dat je vreselijk veel ICMP echo packetjes eruit gooit naar verschillende adressen. Welk pakket genereert dat?

Die trace is inderdaad een hoop overbodige data (de pings e.d.) waardoor je zomaar over de andere dingen heen kijkt. Je zou bijna denken dat je netwerkleverancier meerdere subnets over 1 VLAN heen laat lopen 8-)

Ik ga niets onaardigs zeggen, maar bijzonder vind ik het wel!

Heb ook ut zelfde probleem, veel broadcast request. (zit niet bij scarlet btw, maar bij wedare).

Volgens mij is het toch gewoon mogelijk om via iptables inkomende en uitgaande broadcast request te blokkeren?

Dan moet je server er nog steeds aandacht aan besteden (nl. wegfilteren ipv. doorlaten) dus met iptables schiet je nog niet veel op. Een netwerk moet gewoon niet teveel broadcasts versturen. Let het probleem voor bij je leverancier, die hoort dit op te lossen.

Juist, die moet niet alles in een groot VLAN stoppen, maar bijvoorbeeld elke /24 in een eigen VLAN.