samba4 success/failure report...all's working despite kerberized ssh

Sumit Bose sbose at redhat.com
Thu Feb 20 05:47:04 MST 2014


On Thu, Feb 20, 2014 at 12:39:19PM +0000, Georg Hopp wrote:
> On Thu, Feb 20, 2014 at 09:46:38AM +0000, Georg Hopp wrote:
> > On Wed, Feb 19, 2014 at 12:09:32PM +0000, Georg Hopp wrote:
> > > On Wed, Feb 19, 2014 at 11:50:59AM +0100, Sumit Bose wrote:
> > > > 
> > > > This looks all good, the additional output after kdestroy is due to the
> > > > fact that the TGT must be requested here too.
> > > > 
> > > > Can you run sshd on mail with KRB5_TRACE as well?
> > > > 
> > > > bye,
> > > > Sumit
> > > > 
> > > 
> > > KRB5_TRACE=/dev/stdout /usr/sbin/sshd -ddd -p 2222
> > > 
> > > I am sorry, this does not reveal any new messages...
> > > 
> > > but I think kerberos authentication is active:
> > Hmm, this gssapi-with-mic packet should be traceable...
> > I could send in a tcpdump if that would be of any help but I
> > don't know what options to use for it to generate useful output.
> > 
> > Can anyone help me with this...
> > 
> > best regards
> >    Georg
> 
> Hi again, 
> 
> I created a tcpdump. I cannot see any communication between the
> ssh server and the KDC... is that correct?

Yes, the client has to talk to the KDC to get a service ticket which it
then presents to the ssh server. The ssh server just need the keytab to
check if the service ticket is valid.

I would assume that something is wrong with the keytab on the server,
but I have no idea what it might be.

bye,
Sumit

> 
> Machines: 
>    samba: KDC (samba4 installation)
>    mail:  ssh server
>    www:   ssh client
> 
> The dump goes from the initial login into www until the ssh to mail
> has failed.
> 
> 
> tcpdump -i brv6 '(host mail or host www) and (port 2222 or port kerberos or port domain)'
> error : ret -1
> tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
> listening on brv6, link-type EN10MB (Ethernet), capture size 65535 bytes
> 
> 
> 
> 12:57:11.412049 IP6 2001:4ba0:ffff:138:1::120.43305 > 2001:4ba0:ffff:138:1::160.domain: 25791+ PTR? 1.0.0.0.0.0.0.0.0.0.0.0.1.0.0.0.8.3.1.0.f.f.f.f.0.a.b.4.1.0.0.2.ip6.arpa. (90)
> 12:57:11.412296 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.43305: 25791 NXDomain- 0/0/0 (90)
> 12:57:11.412942 IP6 2001:4ba0:ffff:138:1::120.41046 > 2001:4ba0:ffff:138:1::160.domain: 19871+ A? www.weird-web-workers.org. (43)
> 12:57:11.413151 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.41046: 19871* 1/0/0 A 192.168.120.12 (59)
> 12:57:11.413400 IP6 2001:4ba0:ffff:138:1::120.38364 > 2001:4ba0:ffff:138:1::160.domain: 12420+ A? ldap.weird-web-workers.org. (44)
> 12:57:11.413422 IP6 2001:4ba0:ffff:138:1::120.38364 > 2001:4ba0:ffff:138:1::160.domain: 60527+ AAAA? ldap.weird-web-workers.org. (44)
> 12:57:11.413698 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.38364: 12420* 2/0/0 CNAME host.weird-web-workers.org., A 192.168.120.1 (79)
> 12:57:11.413970 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.38364: 60527* 2/0/0 CNAME host.weird-web-workers.org., AAAA 2001:4ba0:ffff:138:1::1 (91)
> 12:57:11.417544 IP6 2001:4ba0:ffff:138:1::120.46498 > 2001:4ba0:ffff:138:1::160.domain: 31302+ A? ldap.weird-web-workers.org. (44)
> 12:57:11.417585 IP6 2001:4ba0:ffff:138:1::120.46498 > 2001:4ba0:ffff:138:1::160.domain: 21574+ AAAA? ldap.weird-web-workers.org. (44)
> 12:57:11.417976 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.46498: 31302* 2/0/0 CNAME host.weird-web-workers.org., A 192.168.120.1 (79)
> 12:57:11.418258 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.46498: 21574* 2/0/0 CNAME host.weird-web-workers.org., AAAA 2001:4ba0:ffff:138:1::1 (91)
> 
> 
> 
> 
> 
> 12:57:39.239420 IP6 2001:4ba0:ffff:138:1::120.58415 > 2001:4ba0:ffff:138:1::160.domain: 18174+ A? ldap.weird-web-workers.org. (44)
> 12:57:39.239447 IP6 2001:4ba0:ffff:138:1::120.58415 > 2001:4ba0:ffff:138:1::160.domain: 2758+ AAAA? ldap.weird-web-workers.org. (44)
> 12:57:39.239865 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.58415: 18174* 2/0/0 CNAME host.weird-web-workers.org., A 192.168.120.1 (79)
> 12:57:39.240150 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.58415: 2758* 2/0/0 CNAME host.weird-web-workers.org., AAAA 2001:4ba0:ffff:138:1::1 (91)
> 12:57:39.562972 IP www.46690 > samba.kerberos:  v5
> 12:57:39.564797 IP samba.kerberos > www.46690: 
> 12:57:39.565213 IP www.42630 > samba.kerberos:  v5
> 12:57:39.567585 IP samba.kerberos > www.42630:  v5
> 12:57:40.562984 IP6 2001:4ba0:ffff:138:1::120.46024 > 2001:4ba0:ffff:138:1::160.domain: 27369+ A? ldap.weird-web-workers.org. (44)
> 12:57:40.563050 IP6 2001:4ba0:ffff:138:1::120.46024 > 2001:4ba0:ffff:138:1::160.domain: 21638+ AAAA? ldap.weird-web-workers.org. (44)
> 12:57:40.563590 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.46024: 27369* 2/0/0 CNAME host.weird-web-workers.org., A 192.168.120.1 (79)
> 12:57:40.563876 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.46024: 21638* 2/0/0 CNAME host.weird-web-workers.org., AAAA 2001:4ba0:ffff:138:1::1 (91)
> 12:57:40.585503 IP6 2001:4ba0:ffff:138:1::120.36186 > 2001:4ba0:ffff:138:1::160.domain: 39119+ A? www.weird-web-workers.org. (43)
> 12:57:40.585862 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.36186: 39119* 1/0/0 A 192.168.120.12 (59)
> 12:57:40.586158 IP6 2001:4ba0:ffff:138:1::120.43775 > 2001:4ba0:ffff:138:1::160.domain: 13883+ A? ldap.weird-web-workers.org. (44)
> 12:57:40.586178 IP6 2001:4ba0:ffff:138:1::120.43775 > 2001:4ba0:ffff:138:1::160.domain: 56749+ AAAA? ldap.weird-web-workers.org. (44)
> 12:57:40.586444 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.43775: 13883* 2/0/0 CNAME host.weird-web-workers.org., A 192.168.120.1 (79)
> 12:57:40.586718 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.43775: 56749* 2/0/0 CNAME host.weird-web-workers.org., AAAA 2001:4ba0:ffff:138:1::1 (91)
> ============
> this is the end of the initial login onto www
> 
> 
> 12:57:55.385938 IP6 2001:4ba0:ffff:138:1::120.37068 > 2001:4ba0:ffff:138:1::160.domain: 369+ A? www.weird-web-workers.org. (43)
> 12:57:55.386411 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.37068: 369* 1/0/0 A 192.168.120.12 (59)
> 12:57:55.386706 IP6 2001:4ba0:ffff:138:1::120.54160 > 2001:4ba0:ffff:138:1::160.domain: 9584+ A? ldap.weird-web-workers.org. (44)
> 12:57:55.386729 IP6 2001:4ba0:ffff:138:1::120.54160 > 2001:4ba0:ffff:138:1::160.domain: 12149+ AAAA? ldap.weird-web-workers.org. (44)
> 12:57:55.386993 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.54160: 9584* 2/0/0 CNAME host.weird-web-workers.org., A 192.168.120.1 (79)
> 12:57:55.387262 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.54160: 12149* 2/0/0 CNAME host.weird-web-workers.org., AAAA 2001:4ba0:ffff:138:1::1 (91)
> 12:57:55.390392 IP6 2001:4ba0:ffff:138:1::120.52517 > 2001:4ba0:ffff:138:1::160.domain: 16332+ A? mail.weird-web-workers.org. (44)
> 12:57:55.390731 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.52517: 16332* 1/0/0 A 192.168.120.11 (60)
> 12:57:55.390817 IP www.56991 > mail.2222: Flags [S], seq 1196037956, win 29200, options [mss 1460,sackOK,TS val 18442588 ecr 0,nop,wscale 7], length 0
> 12:57:55.390842 IP mail.2222 > www.56991: Flags [S.], seq 4203717201, ack 1196037957, win 28960, options [mss 1460,sackOK,TS val 18442588 ecr 18442588,nop,wscale 7], length 0
> 12:57:55.390862 IP www.56991 > mail.2222: Flags [.], ack 1, win 229, options [nop,nop,TS val 18442588 ecr 18442588], length 0
> 12:57:55.392762 IP www.56991 > mail.2222: Flags [P.], seq 1:32, ack 1, win 229, options [nop,nop,TS val 18442589 ecr 18442588], length 31
> 12:57:55.392782 IP mail.2222 > www.56991: Flags [.], ack 32, win 227, options [nop,nop,TS val 18442589 ecr 18442589], length 0
> 12:57:55.401810 IP mail.2222 > www.56991: Flags [P.], seq 1:32, ack 32, win 227, options [nop,nop,TS val 18442590 ecr 18442589], length 31
> 12:57:55.401838 IP www.56991 > mail.2222: Flags [.], ack 32, win 229, options [nop,nop,TS val 18442590 ecr 18442590], length 0
> 12:57:55.402583 IP mail.2222 > www.56991: Flags [.], seq 32:1480, ack 32, win 227, options [nop,nop,TS val 18442590 ecr 18442590], length 1448
> 12:57:55.402594 IP www.56991 > mail.2222: Flags [.], ack 1480, win 251, options [nop,nop,TS val 18442590 ecr 18442590], length 0
> 12:57:55.402605 IP mail.2222 > www.56991: Flags [P.], seq 1480:1576, ack 32, win 227, options [nop,nop,TS val 18442590 ecr 18442590], length 96
> 12:57:55.402615 IP www.56991 > mail.2222: Flags [.], ack 1576, win 251, options [nop,nop,TS val 18442590 ecr 18442590], length 0
> 12:57:55.403504 IP www.56991 > mail.2222: Flags [.], seq 32:1480, ack 1576, win 251, options [nop,nop,TS val 18442590 ecr 18442590], length 1448
> 12:57:55.403523 IP www.56991 > mail.2222: Flags [P.], seq 1480:1864, ack 1576, win 251, options [nop,nop,TS val 18442590 ecr 18442590], length 384
> 12:57:55.403533 IP mail.2222 > www.56991: Flags [.], ack 1864, win 272, options [nop,nop,TS val 18442590 ecr 18442590], length 0
> 12:57:55.404788 IP www.56991 > mail.2222: Flags [P.], seq 1864:1944, ack 1576, win 251, options [nop,nop,TS val 18442590 ecr 18442590], length 80
> 12:57:55.407569 IP mail.2222 > www.56991: Flags [P.], seq 1576:1888, ack 1944, win 272, options [nop,nop,TS val 18442590 ecr 18442590], length 312
> 12:57:55.411766 IP www.56991 > mail.2222: Flags [P.], seq 1944:1960, ack 1888, win 274, options [nop,nop,TS val 18442591 ecr 18442590], length 16
> 12:57:55.451405 IP mail.2222 > www.56991: Flags [.], ack 1960, win 272, options [nop,nop,TS val 18442595 ecr 18442591], length 0
> 12:57:55.451418 IP www.56991 > mail.2222: Flags [P.], seq 1960:2012, ack 1888, win 274, options [nop,nop,TS val 18442595 ecr 18442595], length 52
> 12:57:55.451426 IP mail.2222 > www.56991: Flags [.], ack 2012, win 272, options [nop,nop,TS val 18442595 ecr 18442595], length 0
> 12:57:55.451502 IP mail.2222 > www.56991: Flags [P.], seq 1888:1940, ack 2012, win 272, options [nop,nop,TS val 18442595 ecr 18442595], length 52
> 12:57:55.451618 IP www.56991 > mail.2222: Flags [P.], seq 2012:2080, ack 1940, win 274, options [nop,nop,TS val 18442595 ecr 18442595], length 68
> 12:57:55.452411 IP6 2001:4ba0:ffff:138:1::110.46959 > 2001:4ba0:ffff:138:1::160.domain: 7218+ PTR? 12.120.168.192.in-addr.arpa. (45)
> 12:57:55.452711 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::110.46959: 7218* 1/0/0 PTR www. (62)
> 12:57:55.452812 IP6 2001:4ba0:ffff:138:1::110.60208 > 2001:4ba0:ffff:138:1::160.domain: 43617+ A? www.weird-web-workers.org. (43)
> 12:57:55.453009 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::110.60208: 43617* 1/0/0 A 192.168.120.12 (59)
> 12:57:55.453773 IP6 2001:4ba0:ffff:138:1::110.49148 > 2001:4ba0:ffff:138:1::160.domain: 46139+ A? mail.weird-web-workers.org. (44)
> 12:57:55.453989 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::110.49148: 46139* 1/0/0 A 192.168.120.11 (60)
> 12:57:55.454253 IP6 2001:4ba0:ffff:138:1::110.42927 > 2001:4ba0:ffff:138:1::160.domain: 59864+ A? ldap.weird-web-workers.org. (44)
> 12:57:55.454279 IP6 2001:4ba0:ffff:138:1::110.42927 > 2001:4ba0:ffff:138:1::160.domain: 25981+ AAAA? ldap.weird-web-workers.org. (44)
> 12:57:55.454554 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::110.42927: 59864* 2/0/0 CNAME host.weird-web-workers.org., A 192.168.120.1 (79)
> 12:57:55.454834 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::110.42927: 25981* 2/0/0 CNAME host.weird-web-workers.org., AAAA 2001:4ba0:ffff:138:1::1 (91)
> 12:57:55.456333 IP mail.2222 > www.56991: Flags [P.], seq 1940:2024, ack 2080, win 272, options [nop,nop,TS val 18442595 ecr 18442595], length 84
> 12:57:55.456725 IP6 2001:4ba0:ffff:138:1::120.50748 > 2001:4ba0:ffff:138:1::160.domain: 62945+ PTR? 11.120.168.192.in-addr.arpa. (45)
> 12:57:55.456973 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.50748: 62945* 1/0/0 PTR mail. (63)
> 12:57:55.457059 IP6 2001:4ba0:ffff:138:1::120.58248 > 2001:4ba0:ffff:138:1::160.domain: 36646+ A? mail.weird-web-workers.org. (44)
> 12:57:55.457286 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.58248: 36646* 1/0/0 A 192.168.120.11 (60)
> 12:57:55.457670 IP6 2001:4ba0:ffff:138:1::120.46375 > 2001:4ba0:ffff:138:1::160.domain: 49069+ A? mail.weird-web-workers.org. (44)
> 12:57:55.457688 IP6 2001:4ba0:ffff:138:1::120.46375 > 2001:4ba0:ffff:138:1::160.domain: 63292+ AAAA? mail.weird-web-workers.org. (44)
> 12:57:55.457912 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.46375: 49069* 1/0/0 A 192.168.120.11 (60)
> 12:57:55.458132 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.46375: 63292* 1/0/0 AAAA 2001:4ba0:ffff:138:1::110 (72)
> 12:57:55.458299 IP6 2001:4ba0:ffff:138:1::120.50576 > 2001:4ba0:ffff:138:1::160.domain: 13018+ PTR? 0.1.1.0.0.0.0.0.0.0.0.0.1.0.0.0.8.3.1.0.f.f.f.f.0.a.b.4.1.0.0.2.ip6.arpa. (90)
> 12:57:55.458471 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.50576: 13018 NXDomain- 0/0/0 (90)
> 12:57:55.459612 IP www.51367 > samba.kerberos: Flags [S], seq 1852348752, win 29200, options [mss 1460,sackOK,TS val 18442595 ecr 0,nop,wscale 7], length 0
> 12:57:55.459637 IP samba.kerberos > www.51367: Flags [S.], seq 4194818088, ack 1852348753, win 28960, options [mss 1460,sackOK,TS val 18442595 ecr 18442595,nop,wscale 7], length 0
> 12:57:55.459653 IP www.51367 > samba.kerberos: Flags [.], ack 1, win 229, options [nop,nop,TS val 18442595 ecr 18442595], length 0
> 12:57:55.459702 IP www.51367 > samba.kerberos: Flags [.], seq 1:1449, ack 1, win 229, options [nop,nop,TS val 18442595 ecr 18442595], length 1448
> 12:57:55.459715 IP samba.kerberos > www.51367: Flags [.], ack 1449, win 249, options [nop,nop,TS val 18442595 ecr 18442595], length 0
> 12:57:55.459727 IP www.51367 > samba.kerberos: Flags [P.], seq 1449:1626, ack 1, win 229, options [nop,nop,TS val 18442595 ecr 18442595], length 177
> 12:57:55.459736 IP samba.kerberos > www.51367: Flags [.], ack 1626, win 272, options [nop,nop,TS val 18442595 ecr 18442595], length 0
> 12:57:55.463281 IP samba.kerberos > www.51367: Flags [P.], seq 1:1336, ack 1626, win 272, options [nop,nop,TS val 18442596 ecr 18442595], length 1335
> 12:57:55.463304 IP www.51367 > samba.kerberos: Flags [.], ack 1336, win 251, options [nop,nop,TS val 18442596 ecr 18442596], length 0
> 12:57:55.463355 IP www.51367 > samba.kerberos: Flags [F.], seq 1626, ack 1336, win 251, options [nop,nop,TS val 18442596 ecr 18442596], length 0
> 12:57:55.463426 IP samba.kerberos > www.51367: Flags [F.], seq 1336, ack 1627, win 272, options [nop,nop,TS val 18442596 ecr 18442596], length 0
> 12:57:55.463438 IP www.51367 > samba.kerberos: Flags [.], ack 1337, win 251, options [nop,nop,TS val 18442596 ecr 18442596], length 0
> 12:57:55.464060 IP www.56991 > mail.2222: Flags [P.], seq 2080:2180, ack 2024, win 274, options [nop,nop,TS val 18442596 ecr 18442595], length 100
> 12:57:55.465524 IP mail.2222 > www.56991: Flags [F.], seq 2024, ack 2180, win 272, options [nop,nop,TS val 18442596 ecr 18442596], length 0
> 12:57:55.466235 IP www.56991 > mail.2222: Flags [F.], seq 2180, ack 2025, win 274, options [nop,nop,TS val 18442596 ecr 18442596], length 0
> 12:57:55.466253 IP mail.2222 > www.56991: Flags [.], ack 2181, win 272, options [nop,nop,TS val 18442596 ecr 18442596], length 0
> 
> 
> 
> 
> 12:58:22.384151 IP www.44258 > samba.kerberos:  v5
> 12:58:22.386229 IP samba.kerberos > www.44258: 
> 12:58:22.386599 IP www.44078 > samba.kerberos:  v5
> 12:58:22.388754 IP samba.kerberos > www.44078:  v5
> 12:58:22.389745 IP6 2001:4ba0:ffff:138:1::120.49074 > 2001:4ba0:ffff:138:1::160.domain: 21824+ A? www.weird-web-workers.org. (43)
> 12:58:22.389776 IP6 2001:4ba0:ffff:138:1::120.49074 > 2001:4ba0:ffff:138:1::160.domain: 43332+ AAAA? www.weird-web-workers.org. (43)
> 12:58:22.390064 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.49074: 21824* 1/0/0 A 192.168.120.12 (59)
> 12:58:22.390251 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.49074: 43332* 1/0/0 AAAA 2001:4ba0:ffff:138:1::120 (71)
> 12:58:22.390549 IP6 2001:4ba0:ffff:138:1::120.41000 > 2001:4ba0:ffff:138:1::160.domain: 43306+ A? samba.weird-web-workers.org. (45)
> 12:58:22.390573 IP6 2001:4ba0:ffff:138:1::120.41000 > 2001:4ba0:ffff:138:1::160.domain: 21271+ AAAA? samba.weird-web-workers.org. (45)
> 12:58:22.390763 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.41000: 43306* 1/0/0 A 192.168.120.16 (61)
> 12:58:22.390940 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.41000: 21271* 1/0/0 AAAA 2001:4ba0:ffff:138:1::160 (73)
> 12:58:22.391069 IP6 2001:4ba0:ffff:138:1::120.55792 > 2001:4ba0:ffff:138:1::160.domain: 19550+ PTR? 0.6.1.0.0.0.0.0.0.0.0.0.1.0.0.0.8.3.1.0.f.f.f.f.0.a.b.4.1.0.0.2.ip6.arpa. (90)
> 12:58:22.391205 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.55792: 19550 NXDomain- 0/0/0 (90)
> 12:58:22.391939 IP www.51369 > samba.kerberos: Flags [S], seq 3632391707, win 29200, options [mss 1460,sackOK,TS val 18445289 ecr 0,nop,wscale 7], length 0
> 12:58:22.391966 IP samba.kerberos > www.51369: Flags [S.], seq 3917334758, ack 3632391708, win 28960, options [mss 1460,sackOK,TS val 18445289 ecr 18445289,nop,wscale 7], length 0
> 12:58:22.391983 IP www.51369 > samba.kerberos: Flags [.], ack 1, win 229, options [nop,nop,TS val 18445289 ecr 18445289], length 0
> 12:58:22.392015 IP www.51369 > samba.kerberos: Flags [.], seq 1:1449, ack 1, win 229, options [nop,nop,TS val 18445289 ecr 18445289], length 1448
> 12:58:22.392025 IP samba.kerberos > www.51369: Flags [.], ack 1449, win 249, options [nop,nop,TS val 18445289 ecr 18445289], length 0
> 12:58:22.392034 IP www.51369 > samba.kerberos: Flags [P.], seq 1449:1604, ack 1, win 229, options [nop,nop,TS val 18445289 ecr 18445289], length 155
> 12:58:22.392045 IP samba.kerberos > www.51369: Flags [.], ack 1604, win 272, options [nop,nop,TS val 18445289 ecr 18445289], length 0
> 12:58:22.395236 IP samba.kerberos > www.51369: Flags [P.], seq 1:1314, ack 1604, win 272, options [nop,nop,TS val 18445289 ecr 18445289], length 1313
> 12:58:22.395257 IP www.51369 > samba.kerberos: Flags [.], ack 1314, win 251, options [nop,nop,TS val 18445289 ecr 18445289], length 0
> 12:58:22.395362 IP www.51369 > samba.kerberos: Flags [F.], seq 1604, ack 1314, win 251, options [nop,nop,TS val 18445289 ecr 18445289], length 0
> 12:58:22.395430 IP samba.kerberos > www.51369: Flags [F.], seq 1314, ack 1605, win 272, options [nop,nop,TS val 18445289 ecr 18445289], length 0
> 12:58:22.395445 IP www.51369 > samba.kerberos: Flags [.], ack 1315, win 251, options [nop,nop,TS val 18445289 ecr 18445289], length 0
> 12:58:22.396578 IP6 2001:4ba0:ffff:138:1::120.56619 > 2001:4ba0:ffff:138:1::160.domain: 22935+ A? samba.weird-web-workers.org. (45)
> 12:58:22.396609 IP6 2001:4ba0:ffff:138:1::120.56619 > 2001:4ba0:ffff:138:1::160.domain: 46815+ AAAA? samba.weird-web-workers.org. (45)
> 12:58:22.396914 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.56619: 22935* 1/0/0 A 192.168.120.16 (61)
> 12:58:22.397099 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.56619: 46815* 1/0/0 AAAA 2001:4ba0:ffff:138:1::160 (73)
> 12:58:22.397235 IP6 2001:4ba0:ffff:138:1::120.49183 > 2001:4ba0:ffff:138:1::160.domain: 14740+ PTR? 0.6.1.0.0.0.0.0.0.0.0.0.1.0.0.0.8.3.1.0.f.f.f.f.0.a.b.4.1.0.0.2.ip6.arpa. (90)
> 12:58:22.397372 IP6 2001:4ba0:ffff:138:1::160.domain > 2001:4ba0:ffff:138:1::120.49183: 14740 NXDomain- 0/0/0 (90)
> 
> 
> 
> ^C
> 129 packets captured
> 137 packets received by filter
> 0 packets dropped by kernel
> 




More information about the samba-technical mailing list