[root@worm ~]# pfctl -sa No ALTQ support in kernel ALTQ related functions disabled TRANSLATION RULES: nat on nve0 inet from 128.0.0.0/24 to any -> (nve0) round-robin rdr on nve0 inet proto tcp from any to any port = telnet -> 128.0.0.10 port 22 rdr on nve0 inet proto tcp from any to any port = http -> 128.0.0.10 port 80 rdr on nve0 inet proto tcp from any to any port = svn -> 128.0.0.10 port 3690 rdr on nve0 inet proto tcp from any to any port = 24 -> 128.0.0.20 port 22 rdr on nve0 inet proto tcp from any to any port = postgresql -> 128.0.0.20 port 5432 rdr on nve0 inet proto tcp from any to any port = 3306 -> 128.0.0.20 port 3306 rdr on nve0 inet proto tcp from any to any port = 5900 -> 128.0.0.80 port 5900 FILTER RULES: scrub in all fragment reassemble block drop in log all pass in log quick on nve0 inet proto tcp from any to 10.0.0.227 port = ssh keep state pass out on nve0 proto tcp all keep state pass out on nve0 proto udp all keep state pass in log quick on nve0 proto icmp from any to (nve0) pass in quick on lo0 all pass in log on nve0 inet proto tcp from 128.0.0.1 to any keep state pass in log on lo1 inet proto tcp from 128.0.0.1 to any keep state pass in log on nve0 inet proto tcp from any to 128.0.0.10 port = ssh keep state pass in log on nve0 inet proto tcp from any to 128.0.0.10 port = http keep state pass in log on nve0 inet proto tcp from any to 128.0.0.10 port = svn keep state pass in log on lo1 inet proto tcp from any to 128.0.0.10 port = ssh keep state pass in log on lo1 inet proto tcp from any to 128.0.0.10 port = http keep state pass in log on lo1 inet proto tcp from any to 128.0.0.10 port = svn keep state pass in log on nve0 inet proto tcp from any to 128.0.0.20 port = ssh keep state pass in log on nve0 inet proto tcp from any to 128.0.0.20 port = 3306 keep state pass in log on nve0 inet proto tcp from any to 128.0.0.20 port = postgresql keep state pass in log on lo1 inet proto tcp from any to 128.0.0.20 port = ssh keep state pass in log on lo1 inet proto tcp from any to 128.0.0.20 port = 3306 keep state pass in log on lo1 inet proto tcp from any to 128.0.0.20 port = postgresql keep state pass in log on nve0 inet proto tcp from any to 128.0.0.80 port = 5900 keep state pass in log on nve0 inet proto tcp from any to 128.0.0.80 port = x11 keep state pass in log on lo1 inet proto tcp from any to 128.0.0.80 port = 5900 keep state pass in log on lo1 inet proto tcp from any to 128.0.0.80 port = x11 keep state pass out log on lo1 proto tcp all keep state STATES: self tcp 128.0.0.20:57170 -> 128.0.0.20:5432 TIME_WAIT:TIME_WAIT self tcp 128.0.0.20:5432 <- 128.0.0.20:57170 TIME_WAIT:TIME_WAIT self tcp 128.0.0.20:5432 <- 10.0.0.227:5432 <- 200.54.68.60:52306 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:50437 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:53513 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:61450 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:59151 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:55570 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:62483 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:61973 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:65052 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:63524 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:58918 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:51751 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:61735 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:60969 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:60202 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:61226 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:60204 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:56109 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:64813 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:53295 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:62771 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:51255 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:50234 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:57149 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:53055 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:55871 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:50496 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:61507 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:50500 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:64836 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:59973 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:57673 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:50250 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:51022 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:64334 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:55890 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:61267 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:58197 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:64342 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:52311 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:62553 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:62817 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:59746 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:54885 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:55656 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:60780 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:50544 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:55665 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:62322 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:64120 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:54141 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:61054 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:54913 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:59783 TIME_WAIT:TIME_WAIT self tcp 10.0.0.227:22 <- 10.0.0.240:64903 ESTABLISHED:ESTABLISHED self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:54155 FIN_WAIT_2:FIN_WAIT_2 self tcp 10.0.0.227:22 <- 10.0.0.240:57484 ESTABLISHED:ESTABLISHED self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:51086 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:51603 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:52377 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:60313 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:50331 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:55451 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:53148 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:53661 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:56990 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:55456 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:57259 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:63149 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:55471 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:52402 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:53685 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:53687 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:61624 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:60857 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:62905 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:51388 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:54209 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:61377 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:64964 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:64710 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:59080 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:52427 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:59863 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:62171 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:63707 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:60124 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:54237 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:63457 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:64737 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:60901 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:58344 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:56553 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:62953 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:61164 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:62188 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:54767 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:64496 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:63478 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:60667 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:52988 TIME_WAIT:TIME_WAIT self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:58621 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:52222 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:53246 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:61512 -> 10.0.0.227:50437 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:62885 -> 10.0.0.227:53513 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:50176 -> 10.0.0.227:61450 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:60450 -> 10.0.0.227:59151 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:52083 -> 10.0.0.227:55570 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:61899 -> 10.0.0.227:62483 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:58539 -> 10.0.0.227:61973 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:50393 -> 10.0.0.227:65052 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:55551 -> 10.0.0.227:63524 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:61043 -> 10.0.0.227:58918 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:50232 -> 10.0.0.227:51751 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:51163 -> 10.0.0.227:61735 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:57921 -> 10.0.0.227:60969 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:61031 -> 10.0.0.227:60202 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:58304 -> 10.0.0.227:61226 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:56349 -> 10.0.0.227:60204 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:61220 -> 10.0.0.227:56109 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:57081 -> 10.0.0.227:64813 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:52077 -> 10.0.0.227:53295 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:55478 -> 10.0.0.227:62771 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:49563 -> 10.0.0.227:51255 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:49688 -> 10.0.0.227:50234 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:58769 -> 10.0.0.227:57149 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:60756 -> 10.0.0.227:53055 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:59417 -> 10.0.0.227:55871 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:51743 -> 10.0.0.227:50496 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:55219 -> 10.0.0.227:61507 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:54261 -> 10.0.0.227:50500 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:57991 -> 10.0.0.227:64836 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:59570 -> 10.0.0.227:59973 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:54839 -> 10.0.0.227:57673 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:52735 -> 10.0.0.227:50250 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:64001 -> 10.0.0.227:51022 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:58283 -> 10.0.0.227:64334 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:61002 -> 10.0.0.227:55890 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:59536 -> 10.0.0.227:61267 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:62825 -> 10.0.0.227:58197 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:51300 -> 10.0.0.227:64342 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:60400 -> 10.0.0.227:52311 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:61382 -> 10.0.0.227:62553 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:52726 -> 10.0.0.227:62817 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:65514 -> 10.0.0.227:59746 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:54396 -> 10.0.0.227:54885 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:64280 -> 10.0.0.227:55656 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:57185 -> 10.0.0.227:60780 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:63589 -> 10.0.0.227:50544 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:57619 -> 10.0.0.227:55665 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:59921 -> 10.0.0.227:62322 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:64254 -> 10.0.0.227:64120 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:61466 -> 10.0.0.227:54141 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:53178 -> 10.0.0.227:61054 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:54206 -> 10.0.0.227:54913 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:60078 -> 10.0.0.227:59783 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:58647 -> 10.0.0.227:54155 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:50701 -> 10.0.0.227:51086 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:56154 -> 10.0.0.227:51603 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:61873 -> 10.0.0.227:52377 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:52949 -> 10.0.0.227:60313 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:51520 -> 10.0.0.227:50331 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:49275 -> 10.0.0.227:55451 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:65511 -> 10.0.0.227:53148 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:64168 -> 10.0.0.227:53661 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:53950 -> 10.0.0.227:56990 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:63227 -> 10.0.0.227:55456 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:53327 -> 10.0.0.227:57259 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:65240 -> 10.0.0.227:63149 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:64555 -> 10.0.0.227:55471 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:55966 -> 10.0.0.227:52402 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:62527 -> 10.0.0.227:53685 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:62788 -> 10.0.0.227:53687 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:50016 -> 10.0.0.227:61624 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:50095 -> 10.0.0.227:60857 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:57673 -> 10.0.0.227:62905 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:54236 -> 10.0.0.227:51388 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:52395 -> 10.0.0.227:54209 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:50992 -> 10.0.0.227:61377 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:53903 -> 10.0.0.227:64964 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:55332 -> 10.0.0.227:64710 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:61248 -> 10.0.0.227:59080 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:59595 -> 10.0.0.227:52427 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:50193 -> 10.0.0.227:59863 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:54538 -> 10.0.0.227:62171 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:58244 -> 10.0.0.227:63707 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:64480 -> 10.0.0.227:60124 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:60409 -> 10.0.0.227:54237 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:64096 -> 10.0.0.227:63457 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:50538 -> 10.0.0.227:64737 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:54979 -> 10.0.0.227:60901 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:52578 -> 10.0.0.227:58344 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:55379 -> 10.0.0.227:56553 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:49799 -> 10.0.0.227:62953 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:58285 -> 10.0.0.227:61164 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:57775 -> 10.0.0.227:62188 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:55707 -> 10.0.0.227:54767 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:54508 -> 10.0.0.227:64496 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:52789 -> 10.0.0.227:63478 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:62157 -> 10.0.0.227:60667 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:59852 -> 10.0.0.227:52988 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT self tcp 128.0.0.80:51408 -> 10.0.0.227:58621 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:61734 -> 10.0.0.227:52222 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self tcp 128.0.0.80:59147 -> 10.0.0.227:53246 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2 self udp 128.0.0.80:63631 -> 10.0.0.227:64772 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:59550 -> 10.0.0.227:54278 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:61133 -> 10.0.0.227:58382 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:62975 -> 10.0.0.227:56081 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:56018 -> 10.0.0.227:56340 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:54184 -> 10.0.0.227:59924 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:56489 -> 10.0.0.227:55829 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:63833 -> 10.0.0.227:63509 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:49813 -> 10.0.0.227:50203 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:51692 -> 10.0.0.227:56603 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:52343 -> 10.0.0.227:53533 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:54387 -> 10.0.0.227:60192 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:61875 -> 10.0.0.227:57889 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:54573 -> 10.0.0.227:56866 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:49830 -> 10.0.0.227:55595 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:49204 -> 10.0.0.227:52524 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:50292 -> 10.0.0.227:53550 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:63190 -> 10.0.0.227:64046 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:61407 -> 10.0.0.227:56879 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:53282 -> 10.0.0.227:61235 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:64708 -> 10.0.0.227:60468 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:60081 -> 10.0.0.227:57654 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:62244 -> 10.0.0.227:55608 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:63717 -> 10.0.0.227:56632 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:61936 -> 10.0.0.227:62776 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:52351 -> 10.0.0.227:56633 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:64760 -> 10.0.0.227:61756 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:58513 -> 10.0.0.227:54077 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:57430 -> 10.0.0.227:53056 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:50305 -> 10.0.0.227:55628 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:58395 -> 10.0.0.227:58956 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:50516 -> 10.0.0.227:57423 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:60880 -> 10.0.0.227:51540 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:50817 -> 10.0.0.227:65370 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:51458 -> 10.0.0.227:56155 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:64446 -> 10.0.0.227:57437 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:53085 -> 10.0.0.227:56158 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:56326 -> 10.0.0.227:62046 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:49964 -> 10.0.0.227:54880 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:52111 -> 10.0.0.227:55652 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:59694 -> 10.0.0.227:51046 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:62487 -> 10.0.0.227:62823 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:64135 -> 10.0.0.227:63594 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:56529 -> 10.0.0.227:56427 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:51636 -> 10.0.0.227:55920 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:53769 -> 10.0.0.227:50290 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:58949 -> 10.0.0.227:52339 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:56077 -> 10.0.0.227:59766 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:51721 -> 10.0.0.227:64635 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:60686 -> 10.0.0.227:60029 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:57829 -> 10.0.0.227:54399 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:59477 -> 10.0.0.227:56724 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:51496 -> 10.0.0.227:52378 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:64127 -> 10.0.0.227:60828 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:54356 -> 10.0.0.227:54941 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:61487 -> 10.0.0.227:51871 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:60189 -> 10.0.0.227:60319 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:61031 -> 10.0.0.227:50081 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:58469 -> 10.0.0.227:51362 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:65075 -> 10.0.0.227:56994 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:59850 -> 10.0.0.227:51364 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:49808 -> 10.0.0.227:56999 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:53271 -> 10.0.0.227:55726 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:63610 -> 10.0.0.227:58799 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:50832 -> 10.0.0.227:62389 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:55978 -> 10.0.0.227:51641 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:63682 -> 10.0.0.227:63163 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:60529 -> 10.0.0.227:52156 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:52856 -> 10.0.0.227:51139 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:56971 -> 10.0.0.227:56262 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:65176 -> 10.0.0.227:64200 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:52799 -> 10.0.0.227:59853 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:55641 -> 10.0.0.227:57040 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:61896 -> 10.0.0.227:59088 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:57012 -> 10.0.0.227:51922 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:63651 -> 10.0.0.227:59603 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:49926 -> 10.0.0.227:57301 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:51531 -> 10.0.0.227:58837 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:61048 -> 10.0.0.227:50908 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:65449 -> 10.0.0.227:53212 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:65418 -> 10.0.0.227:61660 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:64438 -> 10.0.0.227:54240 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:59239 -> 10.0.0.227:61664 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:50264 -> 10.0.0.227:55781 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:52700 -> 10.0.0.227:65000 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:65454 -> 10.0.0.227:64236 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:60994 -> 10.0.0.227:56558 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:62317 -> 10.0.0.227:63470 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:63877 -> 10.0.0.227:63983 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:51508 -> 10.0.0.227:55281 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:64790 -> 10.0.0.227:54770 -> 200.30.193.14:53 MULTIPLE:SINGLE self udp 128.0.0.80:61356 -> 10.0.0.227:63223 -> 200.30.193.14:53 MULTIPLE:SINGLE INFO: Status: Enabled for 0 days 02:24:54 Debug: Urgent Hostid: 0x8c85b0aa State Table Total Rate current entries 299 searches 1117501 128.5/s inserts 4368 0.5/s removals 4069 0.5/s Counters match 4608 0.5/s bad-offset 0 0.0/s fragment 0 0.0/s short 0 0.0/s normalize 0 0.0/s memory 0 0.0/s bad-timestamp 0 0.0/s congestion 0 0.0/s ip-option 0 0.0/s proto-cksum 0 0.0/s state-mismatch 6 0.0/s state-insert 0 0.0/s state-limit 0 0.0/s src-limit 0 0.0/s synproxy 0 0.0/s TIMEOUTS: tcp.first 120s tcp.opening 30s tcp.established 86400s tcp.closing 900s tcp.finwait 45s tcp.closed 90s tcp.tsdiff 30s udp.first 60s udp.single 30s udp.multiple 60s icmp.first 20s icmp.error 10s other.first 60s other.single 30s other.multiple 60s frag 30s interval 10s adaptive.start 0 states adaptive.end 0 states src.track 0s LIMITS: states hard limit 10000 src-nodes hard limit 10000 frags hard limit 5000 TABLES: sshnukes OS FINGERPRINTS: 345 fingerprints loaded