· 6 years ago · Jan 26, 2019, 06:20 PM
1Shorewall 5.2.0.4 Dump at orion.inside.example.com - Sat Jan 26 13:10:18 EST 2019
2
3Shorewall is running
4State:Started Sat Jan 26 13:09:46 EST 2019 from /etc/shorewall/ (/var/lib/shorewall/firewall compiled Fri Jan 25 13:59:05 EST 2019 by Shorewall version 5.2.0.4)
5
6Counters reset Sat Jan 26 13:09:46 EST 2019
7
8Chain INPUT (policy DROP 0 packets, 0 bytes)
9 pkts bytes target prot opt in out source destination
10 5355 3012K br0_in all -- br0 * 0.0.0.0/0 0.0.0.0/0
11 440 35389 eth1_in all -- eth1 * 0.0.0.0/0 0.0.0.0/0
12 852 262K ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
13 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST
14 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type ANYCAST
15 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type MULTICAST
16 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "INPUT REJECT "
17 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
18
19Chain FORWARD (policy DROP 0 packets, 0 bytes)
20 pkts bytes target prot opt in out source destination
2111533 17M br0_fwd all -- br0 * 0.0.0.0/0 0.0.0.0/0
22 7226 403K int_frwd all -- eth1 * 0.0.0.0/0 0.0.0.0/0 policy match dir in pol none
23 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST
24 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type ANYCAST
25 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type MULTICAST
26 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "FORWARD REJECT "
27 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
28
29Chain OUTPUT (policy DROP 0 packets, 0 bytes)
30 pkts bytes target prot opt in out source destination
31 2949 184K br0_out all -- * br0 0.0.0.0/0 0.0.0.0/0
32 305 93457 ACCEPT all -- * eth1 0.0.0.0/0 0.0.0.0/0 policy match dir out pol none
33 852 262K ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
34 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST
35 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type ANYCAST
36 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type MULTICAST
37 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "OUTPUT REJECT "
38 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
39
40Chain br0_fwd (1 references)
41 pkts bytes target prot opt in out source destination
42 12 1380 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW,UNTRACKED
43 12 1380 smurfs all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW,UNTRACKED policy match dir in pol none
4411516 17M tcpflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 policy match dir in pol none
45 0 0 vpn_frwd all -- * * 68.199.193.40/29 0.0.0.0/0 [goto] policy match dir in pol ipsec mode tunnel
46 0 0 vpn_frwd all -- * * 192.168.1.0/24 0.0.0.0/0 [goto] policy match dir in pol ipsec mode tunnel
4711533 17M ext_frwd all -- * * 0.0.0.0/0 0.0.0.0/0 policy match dir in pol none
48
49Chain br0_in (1 references)
50 pkts bytes target prot opt in out source destination
51 2413 1482K dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW,UNTRACKED
52 2413 1482K smurfs all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW,UNTRACKED policy match dir in pol none
53 2913 1511K tcpflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 policy match dir in pol none
54 0 0 vpn-fw all -- * * 68.199.193.40/29 0.0.0.0/0 policy match dir in pol ipsec mode tunnel
55 0 0 vpn-fw all -- * * 192.168.1.0/24 0.0.0.0/0 policy match dir in pol ipsec mode tunnel
56 5355 3012K ext-fw all -- * * 0.0.0.0/0 0.0.0.0/0 policy match dir in pol none
57
58Chain br0_out (1 references)
59 pkts bytes target prot opt in out source destination
60 0 0 ACCEPT all -- * * 0.0.0.0/0 68.199.193.40/29 policy match dir out pol ipsec mode tunnel
61 0 0 ACCEPT all -- * * 0.0.0.0/0 192.168.1.0/24 policy match dir out pol ipsec mode tunnel
62 2949 184K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 policy match dir out pol none
63
64Chain dynamic (4 references)
65 pkts bytes target prot opt in out source destination
66
67Chain eth1_in (1 references)
68 pkts bytes target prot opt in out source destination
69 23 3733 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW,UNTRACKED
70 23 3733 smurfs all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW,UNTRACKED policy match dir in pol none
71 404 29456 tcpflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 policy match dir in pol none
72 440 35389 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 policy match dir in pol none
73
74Chain ext-fw (1 references)
75 pkts bytes target prot opt in out source destination
76 0 0 ACCEPT esp -- * * 107.155.66.2 0.0.0.0/0
77 0 0 ACCEPT udp -- * * 107.155.66.2 0.0.0.0/0 udp dpt:500 ctstate NEW,UNTRACKED
78 0 0 ACCEPT esp -- * * 0.0.0.0/0 0.0.0.0/0
79 2352 1477K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:500 ctstate NEW,UNTRACKED
80 2942 1529K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
81 48 3966 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 /* DNS */
82 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 /* DNS */
83 0 0 ACCEPT udp -- * * 0.0.0.0/0 68.199.193.44 udp dpt:53 /* DNS */
84 0 0 ACCEPT tcp -- * * 0.0.0.0/0 68.199.193.44 tcp dpt:53 /* DNS */
85 0 0 ACCEPT all -- * * 24.190.76.225 0.0.0.0/0
86 0 0 ACCEPT all -- * * 24.190.76.225 68.199.193.44
87 0 0 ACCEPT all -- * * 107.155.66.2 0.0.0.0/0
88 0 0 ACCEPT all -- * * 68.199.193.45 68.199.193.44
89 0 0 ACCEPT all -- * * 68.199.193.45 68.199.193.42
90 0 0 ACCEPT all -- * * 64.1.16.0/28 0.0.0.0/0
91 1 60 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 587,22,993,143
92 3 984 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST
93 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type ANYCAST
94 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type MULTICAST
95 9 360 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "ext-fw REJECT "
96 9 360 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
97
98Chain ext-int (1 references)
99 pkts bytes target prot opt in out source destination
10011516 17M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
101 0 0 ACCEPT tcp -- * * 0.0.0.0/0 192.168.1.7 tcp dpts:51413:54000 /* BitTorrent32 */
102 0 0 ACCEPT udp -- * * 0.0.0.0/0 192.168.1.7 multiport dports 1024,51413 /* BitTorrent32 */
103 3 156 ACCEPT tcp -- * * 0.0.0.0/0 192.168.1.7 tcp dpts:63320:65331 /* BitTorrent32_61320 */
104 1 48 ACCEPT udp -- * * 0.0.0.0/0 192.168.1.7 udp dpt:63320 /* BitTorrent32_61320 */
105 0 0 ACCEPT tcp -- * * 0.0.0.0/0 192.168.1.7 tcp dpts:35753:38000 /* BitTorrent32_35753 */
106 0 0 ACCEPT udp -- * * 0.0.0.0/0 192.168.1.7 multiport dports 1025,35753 /* BitTorrent32_35753 */
107 0 0 ACCEPT tcp -- * * 0.0.0.0/0 192.168.1.7 tcp dpts:56170:57800 /* BitTorrent32_56170 */
108 0 0 ACCEPT udp -- * * 0.0.0.0/0 192.168.1.7 udp dpt:56170 /* BitTorrent32_56170 */
109 0 0 ACCEPT all -- * * 68.199.193.45 0.0.0.0/0
110 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST
111 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type ANYCAST
112 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type MULTICAST
113 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "ext-int REJECT "
114 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
115
116Chain ext-vpn (2 references)
117 pkts bytes target prot opt in out source destination
118 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
119 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST
120 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type ANYCAST
121 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type MULTICAST
122 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "ext-vpn REJECT "
123 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
124
125Chain ext_frwd (1 references)
126 pkts bytes target prot opt in out source destination
127 0 0 ext-vpn all -- * br0 0.0.0.0/0 68.199.193.40/29 policy match dir out pol ipsec mode tunnel
128 0 0 ext-vpn all -- * br0 0.0.0.0/0 192.168.1.0/24 policy match dir out pol ipsec mode tunnel
129 13 1480 ACCEPT all -- * br0 0.0.0.0/0 0.0.0.0/0 policy match dir out pol none
13011520 17M ext-int all -- * eth1 0.0.0.0/0 0.0.0.0/0 policy match dir out pol none
131
132Chain int_frwd (1 references)
133 pkts bytes target prot opt in out source destination
134 15 916 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW,UNTRACKED
135 15 916 smurfs all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW,UNTRACKED policy match dir in pol none
136 7216 402K tcpflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 policy match dir in pol none
137 0 0 ACCEPT all -- * br0 0.0.0.0/0 68.199.193.40/29 policy match dir out pol ipsec mode tunnel
138 0 0 ACCEPT all -- * br0 0.0.0.0/0 192.168.1.0/24 policy match dir out pol ipsec mode tunnel
139 7226 403K ACCEPT all -- * br0 0.0.0.0/0 0.0.0.0/0 policy match dir out pol none
140 0 0 ACCEPT all -- * eth1 0.0.0.0/0 0.0.0.0/0 policy match dir out pol none
141
142Chain logdrop (0 references)
143 pkts bytes target prot opt in out source destination
144 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
145
146Chain logflags (7 references)
147 pkts bytes target prot opt in out source destination
148 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: up to 1/sec burst 10 mode srcip LOG flags 4 level 6 prefix "logflags DROP "
149 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
150
151Chain logreject (0 references)
152 pkts bytes target prot opt in out source destination
153 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0
154
155Chain reject (8 references)
156 pkts bytes target prot opt in out source destination
157 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match src-type BROADCAST
158 0 0 DROP all -- * * 224.0.0.0/4 0.0.0.0/0
159 0 0 DROP 2 -- * * 0.0.0.0/0 0.0.0.0/0
160 9 360 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset
161 0 0 REJECT udp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
162 0 0 REJECT icmp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-unreachable
163 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
164
165Chain sha-lh-0e91f501d3a30c379f0f (0 references)
166 pkts bytes target prot opt in out source destination
167
168Chain sha-rh-9e4749e054acff580f04 (0 references)
169 pkts bytes target prot opt in out source destination
170
171Chain shorewall (0 references)
172 pkts bytes target prot opt in out source destination
173 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: %CURRENTTIME side: source mask: 255.255.255.255
174
175Chain smurflog (2 references)
176 pkts bytes target prot opt in out source destination
177 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "smurfs DROP "
178 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
179
180Chain smurfs (4 references)
181 pkts bytes target prot opt in out source destination
182 9 2964 RETURN all -- * * 0.0.0.0 0.0.0.0/0
183 0 0 smurflog all -- * * 0.0.0.0/0 0.0.0.0/0 [goto] ADDRTYPE match src-type BROADCAST
184 0 0 smurflog all -- * * 224.0.0.0/4 0.0.0.0/0 [goto]
185
186Chain tcpflags (4 references)
187 pkts bytes target prot opt in out source destination
188 0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcp flags:0x3F/0x29
189 0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcp flags:0x3F/0x00
190 0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcp flags:0x06/0x06
191 0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcp flags:0x05/0x05
192 0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcp flags:0x03/0x03
193 0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcp flags:0x19/0x09
194 0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcp spt:0 flags:0x17/0x02
195
196Chain vpn-ext (1 references)
197 pkts bytes target prot opt in out source destination
198 0 0 TCPMSS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 tcpmss match 1400:65535 TCPMSS set 1400
199 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
200 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST
201 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type ANYCAST
202 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type MULTICAST
203 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "vpn-ext REJECT "
204 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 [goto]
205
206Chain vpn-fw (2 references)
207 pkts bytes target prot opt in out source destination
208 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:500 ctstate NEW,UNTRACKED
209 0 0 TCPMSS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 tcpmss match 1400:65535 TCPMSS set 1400
210 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
211
212Chain vpn-int (1 references)
213 pkts bytes target prot opt in out source destination
214 0 0 TCPMSS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 tcpmss match 1400:65535 TCPMSS set 1400
215 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
216 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "vpn-int ACCEPT "
217 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
218
219Chain vpn_frwd (2 references)
220 pkts bytes target prot opt in out source destination
221 0 0 vpn-ext all -- * br0 0.0.0.0/0 0.0.0.0/0 policy match dir out pol none
222 0 0 vpn-int all -- * eth1 0.0.0.0/0 0.0.0.0/0 policy match dir out pol none
223
224Log (/var/log/messages)
225
226Jan 26 13:04:28 ext-fw REJECT IN=br0 OUT= PHYSIN=eth0 SRC=177.206.49.51 DST=68.199.193.42 LEN=52 TOS=0x00 PREC=0x00 TTL=109 ID=11359 DF PROTO=TCP SPT=64145 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
227Jan 26 13:04:28 ext-fw REJECT IN=br0 OUT= PHYSIN=eth0 SRC=177.206.49.51 DST=68.199.193.44 LEN=52 TOS=0x00 PREC=0x00 TTL=109 ID=11843 DF PROTO=TCP SPT=64146 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
228Jan 26 13:04:29 ext-fw REJECT IN=br0 OUT= PHYSIN=eth0 SRC=177.206.49.51 DST=68.199.193.42 LEN=52 TOS=0x00 PREC=0x00 TTL=109 ID=11853 DF PROTO=TCP SPT=64145 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
229Jan 26 13:04:29 ext-fw REJECT IN=br0 OUT= PHYSIN=eth0 SRC=185.208.209.6 DST=68.199.193.44 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=50206 PROTO=TCP SPT=56305 DPT=24634 WINDOW=1024 RES=0x00 SYN URGP=0
230Jan 26 13:04:29 ext-fw REJECT IN=br0 OUT= PHYSIN=eth0 SRC=185.208.209.6 DST=68.199.193.44 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=50207 PROTO=TCP SPT=56305 DPT=24634 WINDOW=1200 RES=0x00 RST URGP=0
231Jan 26 13:04:29 ext-fw REJECT IN=br0 OUT= PHYSIN=eth0 SRC=177.206.49.51 DST=68.199.193.44 LEN=48 TOS=0x00 PREC=0x00 TTL=109 ID=11943 DF PROTO=TCP SPT=64146 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
232Jan 26 13:04:29 ext-fw REJECT IN=br0 OUT= PHYSIN=eth0 SRC=177.206.49.51 DST=68.199.193.42 LEN=48 TOS=0x00 PREC=0x00 TTL=109 ID=11952 DF PROTO=TCP SPT=64145 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
233Jan 26 13:04:31 ext-fw REJECT IN=br0 OUT= PHYSIN=eth0 SRC=54.239.18.122 DST=68.199.193.42 LEN=49 TOS=0x00 PREC=0x00 TTL=221 ID=43070 DF PROTO=TCP SPT=443 DPT=40259 WINDOW=440 RES=0x00 ACK PSH URGP=0
234Jan 26 13:04:31 ext-fw REJECT IN=br0 OUT= PHYSIN=eth0 SRC=54.239.18.122 DST=68.199.193.42 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=65152 DF PROTO=TCP SPT=443 DPT=40259 WINDOW=8201 RES=0x00 RST URGP=0
235Jan 26 13:04:31 ext-fw REJECT IN=br0 OUT= PHYSIN=eth0 SRC=54.239.18.122 DST=68.199.193.42 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=65153 DF PROTO=TCP SPT=443 DPT=40259 WINDOW=8201 RES=0x00 RST URGP=0
236Jan 26 13:04:31 ext-fw REJECT IN=br0 OUT= PHYSIN=eth0 SRC=54.239.18.122 DST=68.199.193.42 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=65154 DF PROTO=TCP SPT=443 DPT=40259 WINDOW=8201 RES=0x00 RST URGP=0
237Jan 26 13:04:34 ext-fw REJECT IN=br0 OUT= PHYSIN=eth0 SRC=223.97.27.76 DST=68.199.193.42 LEN=40 TOS=0x00 PREC=0x00 TTL=40 ID=25939 PROTO=TCP SPT=19634 DPT=23 WINDOW=8402 RES=0x00 SYN URGP=0
238Jan 26 13:04:34 ext-fw REJECT IN=br0 OUT= PHYSIN=eth0 SRC=223.97.27.76 DST=68.199.193.42 LEN=40 TOS=0x00 PREC=0x00 TTL=40 ID=25939 PROTO=TCP SPT=19634 DPT=23 WINDOW=8402 RES=0x00 SYN URGP=0
239Jan 26 13:04:34 ext-fw REJECT IN=br0 OUT= PHYSIN=eth0 SRC=223.97.27.76 DST=68.199.193.42 LEN=40 TOS=0x00 PREC=0x00 TTL=41 ID=25939 PROTO=TCP SPT=19634 DPT=2323 WINDOW=8402 RES=0x00 SYN URGP=0
240Jan 26 13:04:36 ext-fw REJECT IN=br0 OUT= PHYSIN=eth0 SRC=200.46.207.139 DST=68.199.193.42 LEN=40 TOS=0x00 PREC=0x00 TTL=46 ID=21528 PROTO=TCP SPT=11861 DPT=2323 WINDOW=15429 RES=0x00 SYN URGP=0
241Jan 26 13:04:37 ext-fw REJECT IN=br0 OUT= PHYSIN=eth0 SRC=68.199.243.62 DST=68.199.193.44 LEN=40 TOS=0x08 PREC=0x00 TTL=245 ID=9141 DF PROTO=TCP SPT=1129 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0
242Jan 26 13:04:43 ext-fw REJECT IN=br0 OUT= PHYSIN=eth0 SRC=112.37.233.231 DST=68.199.193.44 LEN=40 TOS=0x00 PREC=0x00 TTL=40 ID=34492 PROTO=TCP SPT=28543 DPT=23 WINDOW=29799 RES=0x00 SYN URGP=0
243Jan 26 13:04:44 ext-fw REJECT IN=br0 OUT= PHYSIN=eth0 SRC=77.72.82.22 DST=68.199.193.42 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=63765 PROTO=TCP SPT=46550 DPT=54000 WINDOW=1200 RES=0x00 RST URGP=0
244Jan 26 13:04:45 ext-fw REJECT IN=br0 OUT= PHYSIN=eth0 SRC=185.176.26.9 DST=68.199.193.44 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=16977 PROTO=TCP SPT=46894 DPT=13511 WINDOW=1024 RES=0x00 SYN URGP=0
245Jan 26 13:04:45 ext-fw REJECT IN=br0 OUT= PHYSIN=eth0 SRC=185.176.26.9 DST=68.199.193.44 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=16976 PROTO=TCP SPT=46894 DPT=13511 WINDOW=1200 RES=0x00 RST URGP=0
246
247NAT Table
248
249Chain PREROUTING (policy ACCEPT 49 packets, 4914 bytes)
250 pkts bytes target prot opt in out source destination
251 63 4622 ext_dnat all -- br0 * 0.0.0.0/0 0.0.0.0/0 policy match dir in pol none
252
253Chain INPUT (policy ACCEPT 35 packets, 4186 bytes)
254 pkts bytes target prot opt in out source destination
255
256Chain OUTPUT (policy ACCEPT 49 packets, 3511 bytes)
257 pkts bytes target prot opt in out source destination
258
259Chain POSTROUTING (policy ACCEPT 56 packets, 3827 bytes)
260 pkts bytes target prot opt in out source destination
261 80 5761 br0_masq all -- * br0 0.0.0.0/0 0.0.0.0/0
262
263Chain br0_masq (1 references)
264 pkts bytes target prot opt in out source destination
265 0 0 MASQUERADE all -- * * 10.0.0.0/8 0.0.0.0/0 policy match dir out pol none
266 0 0 MASQUERADE all -- * * 169.254.0.0/16 0.0.0.0/0 policy match dir out pol none
267 0 0 MASQUERADE all -- * * 172.16.0.0/12 0.0.0.0/0 policy match dir out pol none
268 15 916 MASQUERADE all -- * * 192.168.0.0/16 0.0.0.0/0 policy match dir out pol none
269
270Chain ext_dnat (1 references)
271 pkts bytes target prot opt in out source destination
272 0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpts:51413:54000 /* BitTorrent32 */ to:192.168.1.7
273 0 0 DNAT udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 1024,51413 /* BitTorrent32 */ to:192.168.1.7
274 3 156 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpts:63320:65331 /* BitTorrent32_61320 */ to:192.168.1.7
275 1 48 DNAT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:63320 /* BitTorrent32_61320 */ to:192.168.1.7
276 0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpts:35753:38000 /* BitTorrent32_35753 */ to:192.168.1.7
277 0 0 DNAT udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 1025,35753 /* BitTorrent32_35753 */ to:192.168.1.7
278 0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpts:56170:57800 /* BitTorrent32_56170 */ to:192.168.1.7
279 0 0 DNAT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:56170 /* BitTorrent32_56170 */ to:192.168.1.7
280
281Mangle Table
282
283Chain PREROUTING (policy ACCEPT 14313 packets, 11M bytes)
284 pkts bytes target prot opt in out source destination
285
286Chain INPUT (policy ACCEPT 4915 packets, 2529K bytes)
287 pkts bytes target prot opt in out source destination
288
289Chain FORWARD (policy ACCEPT 9400 packets, 8579K bytes)
290 pkts bytes target prot opt in out source destination
29118783 17M MARK all -- * * 0.0.0.0/0 0.0.0.0/0 MARK and 0xffffff00
292
293Chain OUTPUT (policy ACCEPT 3636 packets, 430K bytes)
294 pkts bytes target prot opt in out source destination
295
296Chain POSTROUTING (policy ACCEPT 13036 packets, 9009K bytes)
297 pkts bytes target prot opt in out source destination
298
299Raw Table
300
301Chain PREROUTING (policy ACCEPT 14213 packets, 11M bytes)
302 pkts bytes target prot opt in out source destination
303 0 0 CT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:10080 CT helper amanda
304 0 0 CT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:21 flags:0x17/0x02 CT helper ftp
305 0 0 CT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1719 CT helper RAS
306 0 0 CT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1720 flags:0x17/0x02 CT helper Q.931
307 0 0 CT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:6667 flags:0x17/0x02 CT helper irc
308 0 0 CT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:137 CT helper netbios-ns
309 0 0 CT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1723 flags:0x17/0x02 CT helper pptp
310 0 0 CT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:6566 flags:0x17/0x02 CT helper sane
311 2 1399 CT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:5060 CT helper sip
312 50 4051 CT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:161 CT helper snmp
313 0 0 CT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:69 CT helper tftp
314
315Chain OUTPUT (policy ACCEPT 3580 packets, 426K bytes)
316 pkts bytes target prot opt in out source destination
317 0 0 CT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:10080 CT helper amanda
318 0 0 CT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:21 flags:0x17/0x02 CT helper ftp
319 0 0 CT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1719 CT helper RAS
320 0 0 CT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1720 flags:0x17/0x02 CT helper Q.931
321 0 0 CT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:6667 flags:0x17/0x02 CT helper irc
322 0 0 CT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:137 CT helper netbios-ns
323 0 0 CT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1723 flags:0x17/0x02 CT helper pptp
324 0 0 CT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:6566 flags:0x17/0x02 CT helper sane
325 2 1152 CT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:5060 CT helper sip
326 50 4051 CT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:161 CT helper snmp
327 0 0 CT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:69 CT helper tftp
328
329Conntrack Table (586 out of 262144)
330
331tcp 6 430871 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=45836 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=45836 [ASSURED] mark=0 use=1
332udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=52441 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=52441 [ASSURED] mark=0 use=1
333tcp 6 114 TIME_WAIT src=68.199.193.42 dst=64.1.16.1 sport=33816 dport=4949 src=64.1.16.1 dst=68.199.193.42 sport=4949 dport=33816 [ASSURED] mark=0 use=1
334tcp 6 67 TIME_WAIT src=68.199.193.42 dst=66.104.218.100 sport=44304 dport=443 src=66.104.218.100 dst=68.199.193.42 sport=443 dport=44304 [ASSURED] mark=0 use=1
335tcp 6 431973 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=40046 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=40046 [ASSURED] mark=0 use=1
336tcp 6 299 ESTABLISHED src=68.199.193.42 dst=206.201.174.20 sport=57754 dport=4949 src=206.201.174.20 dst=68.199.193.42 sport=4949 dport=57754 [ASSURED] mark=0 use=1
337tcp 6 266 ESTABLISHED src=192.168.1.35 dst=52.165.175.144 sport=65043 dport=443 src=52.165.175.144 dst=68.199.193.42 sport=443 dport=65043 [ASSURED] mark=0 use=1
338udp 17 129 src=192.168.1.1 dst=192.168.1.1 sport=34247 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=34247 [ASSURED] mark=0 use=1
339udp 17 0 src=67.215.84.69 dst=68.199.193.44 sport=52117 dport=53 src=68.199.193.44 dst=67.215.84.69 sport=53 dport=52117 mark=0 use=1
340tcp 6 77 TIME_WAIT src=68.199.193.42 dst=66.104.218.100 sport=44408 dport=443 src=66.104.218.100 dst=68.199.193.42 sport=443 dport=44408 [ASSURED] mark=0 use=1
341udp 17 177 src=107.155.66.2 dst=68.199.193.42 sport=500 dport=500 src=68.199.193.42 dst=107.155.66.2 sport=500 dport=500 [ASSURED] mark=0 use=1
342tcp 6 65 TIME_WAIT src=68.199.193.42 dst=64.1.16.18 sport=38458 dport=443 src=64.1.16.18 dst=68.199.193.42 sport=443 dport=38458 [ASSURED] mark=0 use=1
343tcp 6 431999 ESTABLISHED src=68.199.193.42 dst=206.201.161.20 sport=46882 dport=4949 src=206.201.161.20 dst=68.199.193.42 sport=4949 dport=46882 [ASSURED] mark=0 use=1
344tcp 6 352268 ESTABLISHED src=192.168.1.111 dst=173.194.175.188 sport=33278 dport=5228 src=173.194.175.188 dst=68.199.193.42 sport=5228 dport=33278 [ASSURED] mark=0 use=1
345tcp 6 86 TIME_WAIT src=68.199.193.42 dst=64.1.16.27 sport=58970 dport=25 src=64.1.16.27 dst=68.199.193.42 sport=25 dport=58970 [ASSURED] mark=0 use=1
346tcp 6 71 TIME_WAIT src=68.199.193.42 dst=64.1.16.3 sport=56102 dport=25 src=64.1.16.3 dst=68.199.193.42 sport=25 dport=56102 [ASSURED] mark=0 use=1
347udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=53681 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=53681 [ASSURED] mark=0 use=1
348tcp 6 117 SYN_SENT src=82.202.209.157 dst=68.199.193.46 sport=60000 dport=50000 [UNREPLIED] src=68.199.193.46 dst=82.202.209.157 sport=50000 dport=60000 mark=0 use=1
349udp 17 102 src=192.168.1.1 dst=192.168.1.1 sport=56650 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=56650 [ASSURED] mark=0 use=1
350udp 17 2334 src=185.53.91.44 dst=68.199.193.46 sport=5074 dport=5060 [UNREPLIED] src=68.199.193.46 dst=185.53.91.44 sport=5060 dport=5074 mark=0 helper=sip use=2
351tcp 6 431956 ESTABLISHED src=192.168.1.7 dst=52.94.226.39 sport=43236 dport=443 src=52.94.226.39 dst=68.199.193.42 sport=443 dport=43236 [ASSURED] mark=0 use=1
352tcp 6 86 TIME_WAIT src=68.199.193.42 dst=64.1.16.5 sport=59682 dport=25 src=64.1.16.5 dst=68.199.193.42 sport=25 dport=59682 [ASSURED] mark=0 use=1
353tcp 6 65 TIME_WAIT src=68.199.193.42 dst=66.104.218.100 sport=44296 dport=443 src=66.104.218.100 dst=68.199.193.42 sport=443 dport=44296 [ASSURED] mark=0 use=1
354tcp 6 431998 ESTABLISHED src=192.168.1.7 dst=8.252.11.139 sport=51978 dport=443 src=8.252.11.139 dst=68.199.193.42 sport=443 dport=51978 [ASSURED] mark=0 use=1
355udp 17 29 src=65.46.72.6 dst=68.199.193.42 sport=500 dport=500 [UNREPLIED] src=68.199.193.42 dst=65.46.72.6 sport=500 dport=500 mark=0 use=1
356tcp 6 71 TIME_WAIT src=68.199.193.42 dst=64.1.16.18 sport=38508 dport=443 src=64.1.16.18 dst=68.199.193.42 sport=443 dport=38508 [ASSURED] mark=0 use=1
357tcp 6 431966 ESTABLISHED src=192.168.1.35 dst=31.13.71.1 sport=65083 dport=443 src=31.13.71.1 dst=68.199.193.42 sport=443 dport=65083 [ASSURED] mark=0 use=1
358tcp 6 73 TIME_WAIT src=68.199.193.42 dst=64.1.16.27 sport=58836 dport=25 src=64.1.16.27 dst=68.199.193.42 sport=25 dport=58836 [ASSURED] mark=0 use=1
359tcp 6 431993 ESTABLISHED src=192.168.1.7 dst=66.104.218.100 sport=51310 dport=143 src=66.104.218.100 dst=68.199.193.42 sport=143 dport=51310 [ASSURED] mark=0 use=1
360udp 17 24 src=74.125.74.14 dst=68.199.193.44 sport=62305 dport=53 src=68.199.193.44 dst=74.125.74.14 sport=53 dport=62305 mark=0 use=1
361tcp 6 431997 ESTABLISHED src=192.168.1.7 dst=172.217.6.226 sport=42118 dport=443 src=172.217.6.226 dst=68.199.193.42 sport=443 dport=42118 [ASSURED] mark=0 use=1
362tcp 6 431973 ESTABLISHED src=192.168.1.7 dst=172.217.197.189 sport=37684 dport=443 src=172.217.197.189 dst=68.199.193.42 sport=443 dport=37684 [ASSURED] mark=0 use=1
363tcp 6 430806 ESTABLISHED src=192.168.1.7 dst=173.194.207.109 sport=35272 dport=993 src=173.194.207.109 dst=68.199.193.42 sport=993 dport=35272 [ASSURED] mark=0 use=1
364udp 17 4 src=192.168.1.7 dst=192.168.1.1 sport=44027 dport=53 src=192.168.1.1 dst=192.168.1.7 sport=53 dport=44027 mark=0 use=1
365tcp 6 86 TIME_WAIT src=68.199.193.42 dst=68.199.193.45 sport=35710 dport=25 src=68.199.193.45 dst=68.199.193.42 sport=25 dport=35710 [ASSURED] mark=0 use=1
366tcp 6 85 TIME_WAIT src=68.199.193.42 dst=64.1.16.27 sport=58962 dport=25 src=64.1.16.27 dst=68.199.193.42 sport=25 dport=58962 [ASSURED] mark=0 use=1
367tcp 6 364028 ESTABLISHED src=192.168.1.35 dst=52.165.171.165 sport=55577 dport=443 src=52.165.171.165 dst=68.199.193.42 sport=443 dport=55577 [ASSURED] mark=0 use=1
368tcp 6 72 TIME_WAIT src=68.199.193.42 dst=64.1.16.27 sport=58824 dport=25 src=64.1.16.27 dst=68.199.193.42 sport=25 dport=58824 [ASSURED] mark=0 use=1
369tcp 6 431927 ESTABLISHED src=192.168.1.114 dst=34.202.208.7 sport=54322 dport=443 src=34.202.208.7 dst=68.199.193.42 sport=443 dport=54322 [ASSURED] mark=0 use=1
370tcp 6 80 TIME_WAIT src=192.168.1.112 dst=52.55.84.74 sport=45646 dport=9543 src=52.55.84.74 dst=68.199.193.42 sport=9543 dport=45646 [ASSURED] mark=0 use=1
371tcp 6 431972 ESTABLISHED src=192.168.1.113 dst=54.239.27.11 sport=51774 dport=443 src=54.239.27.11 dst=68.199.193.42 sport=443 dport=51774 [ASSURED] mark=0 use=1
372tcp 6 431973 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=45840 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=45840 [ASSURED] mark=0 use=1
373udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=59133 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=59133 [ASSURED] mark=0 use=1
374tcp 6 431972 ESTABLISHED src=192.168.1.23 dst=23.246.7.183 sport=33419 dport=80 src=23.246.7.183 dst=68.199.193.42 sport=80 dport=33419 [ASSURED] mark=0 use=1
375tcp 6 71 TIME_WAIT src=68.199.193.42 dst=68.199.193.45 sport=35560 dport=25 src=68.199.193.45 dst=68.199.193.42 sport=25 dport=35560 [ASSURED] mark=0 use=1
376tcp 6 12 TIME_WAIT src=64.1.16.3 dst=68.199.193.42 sport=53210 dport=25 src=68.199.193.42 dst=64.1.16.3 sport=25 dport=53210 [ASSURED] mark=0 use=1
377tcp 6 35 TIME_WAIT src=192.168.1.120 dst=107.170.198.71 sport=14584 dport=80 src=107.170.198.71 dst=68.199.193.42 sport=80 dport=14584 [ASSURED] mark=0 use=1
378tcp 6 431980 ESTABLISHED src=192.168.1.7 dst=172.217.3.110 sport=42848 dport=443 src=172.217.3.110 dst=68.199.193.42 sport=443 dport=42848 [ASSURED] mark=0 use=1
379tcp 6 430813 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=45780 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=45780 [ASSURED] mark=0 use=1
380udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=44967 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=44967 [ASSURED] mark=0 use=1
381tcp 6 70 TIME_WAIT src=68.199.193.42 dst=64.1.16.18 sport=38496 dport=443 src=64.1.16.18 dst=68.199.193.42 sport=443 dport=38496 [ASSURED] mark=0 use=1
382tcp 6 431939 ESTABLISHED src=192.168.1.7 dst=192.168.1.100 sport=55372 dport=445 src=192.168.1.100 dst=192.168.1.7 sport=445 dport=55372 [ASSURED] mark=0 use=1
383tcp 6 431980 ESTABLISHED src=192.168.1.7 dst=35.201.89.41 sport=60930 dport=443 src=35.201.89.41 dst=68.199.193.42 sport=443 dport=60930 [ASSURED] mark=0 use=1
384tcp 6 431974 ESTABLISHED src=192.168.1.7 dst=172.217.3.106 sport=50308 dport=443 src=172.217.3.106 dst=68.199.193.42 sport=443 dport=50308 [ASSURED] mark=0 use=1
385tcp 6 332993 ESTABLISHED src=192.168.1.109 dst=173.194.207.188 sport=55334 dport=5228 src=173.194.207.188 dst=68.199.193.42 sport=5228 dport=55334 [ASSURED] mark=0 use=1
386tcp 6 431939 ESTABLISHED src=192.168.1.7 dst=192.168.1.100 sport=55376 dport=445 src=192.168.1.100 dst=192.168.1.7 sport=445 dport=55376 [ASSURED] mark=0 use=1
387tcp 6 431976 ESTABLISHED src=192.168.1.7 dst=162.247.242.19 sport=41032 dport=443 src=162.247.242.19 dst=68.199.193.42 sport=443 dport=41032 [ASSURED] mark=0 use=1
388tcp 6 255383 ESTABLISHED src=192.168.1.43 dst=52.165.170.112 sport=55749 dport=443 src=52.165.170.112 dst=68.199.193.42 sport=443 dport=55749 [ASSURED] mark=0 use=1
389tcp 6 79 TIME_WAIT src=68.199.193.42 dst=68.199.193.45 sport=35646 dport=25 src=68.199.193.45 dst=68.199.193.42 sport=25 dport=35646 [ASSURED] mark=0 use=2
390tcp 6 431950 ESTABLISHED src=192.168.1.35 dst=68.199.193.42 sport=65073 dport=993 src=68.199.193.42 dst=192.168.1.35 sport=993 dport=65073 [ASSURED] mark=0 use=1
391udp 17 6 src=68.199.193.42 dst=8.254.13.2 sport=31756 dport=53 src=8.254.13.2 dst=68.199.193.42 sport=53 dport=31756 mark=0 use=1
392tcp 6 431973 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=45784 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=45784 [ASSURED] mark=0 use=1
393tcp 6 28 TIME_WAIT src=192.168.1.23 dst=23.246.7.183 sport=33414 dport=80 src=23.246.7.183 dst=68.199.193.42 sport=80 dport=33414 [ASSURED] mark=0 use=1
394tcp 6 431987 ESTABLISHED src=192.168.1.35 dst=192.241.187.124 sport=65112 dport=443 src=192.241.187.124 dst=68.199.193.42 sport=443 dport=65112 [ASSURED] mark=0 use=1
395udp 17 6 src=68.199.193.42 dst=208.76.45.53 sport=54655 dport=53 src=208.76.45.53 dst=68.199.193.42 sport=53 dport=54655 mark=0 use=1
396tcp 6 431968 ESTABLISHED src=192.168.1.7 dst=172.217.11.10 sport=43470 dport=443 src=172.217.11.10 dst=68.199.193.42 sport=443 dport=43470 [ASSURED] mark=0 use=1
397udp 17 24 src=192.168.1.119 dst=192.168.1.1 sport=42146 dport=53 src=192.168.1.1 dst=192.168.1.119 sport=53 dport=42146 mark=0 use=1
398udp 17 22 src=8.0.18.133 dst=68.199.193.44 sport=55906 dport=53 src=68.199.193.44 dst=8.0.18.133 sport=53 dport=55906 mark=0 use=1
399udp 17 12 src=192.168.1.1 dst=192.168.1.1 sport=48671 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=48671 mark=0 use=1
400tcp 6 431880 ESTABLISHED src=192.168.1.7 dst=64.1.16.23 sport=59874 dport=993 src=64.1.16.23 dst=68.199.193.42 sport=993 dport=59874 [ASSURED] mark=0 use=1
401tcp 6 87 SYN_SENT src=5.188.206.14 dst=68.199.193.46 sport=46565 dport=3298 [UNREPLIED] src=68.199.193.46 dst=5.188.206.14 sport=3298 dport=46565 mark=0 use=1
402tcp 6 431975 ESTABLISHED src=192.168.1.7 dst=172.217.10.78 sport=35172 dport=443 src=172.217.10.78 dst=68.199.193.42 sport=443 dport=35172 [ASSURED] mark=0 use=1
403tcp 6 431956 ESTABLISHED src=192.168.1.7 dst=54.239.23.96 sport=58768 dport=443 src=54.239.23.96 dst=68.199.193.42 sport=443 dport=58768 [ASSURED] mark=0 use=1
404tcp 6 430860 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=45808 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=45808 [ASSURED] mark=0 use=1
405udp 17 25 src=68.199.193.42 dst=2.22.230.67 sport=9195 dport=53 src=2.22.230.67 dst=68.199.193.42 sport=53 dport=9195 mark=0 use=1
406udp 17 15 src=65.55.81.4 dst=68.199.193.44 sport=57651 dport=53 src=68.199.193.44 dst=65.55.81.4 sport=53 dport=57651 mark=0 use=1
407tcp 6 76 TIME_WAIT src=68.199.193.42 dst=64.1.16.5 sport=59584 dport=25 src=64.1.16.5 dst=68.199.193.42 sport=25 dport=59584 [ASSURED] mark=0 use=1
408tcp 6 87 TIME_WAIT src=68.199.193.42 dst=64.1.16.3 sport=56266 dport=25 src=64.1.16.3 dst=68.199.193.42 sport=25 dport=56266 [ASSURED] mark=0 use=1
409tcp 6 431974 ESTABLISHED src=192.168.1.7 dst=54.164.7.44 sport=60614 dport=443 src=54.164.7.44 dst=68.199.193.42 sport=443 dport=60614 [ASSURED] mark=0 use=1
410udp 17 19 src=144.160.152.244 dst=68.199.193.44 sport=34850 dport=53 src=68.199.193.44 dst=144.160.152.244 sport=53 dport=34850 mark=0 use=1
411udp 17 6 src=68.199.193.42 dst=192.43.172.30 sport=13074 dport=53 src=192.43.172.30 dst=68.199.193.42 sport=53 dport=13074 mark=0 use=1
412udp 17 24 src=192.168.1.119 dst=192.168.1.1 sport=15417 dport=53 src=192.168.1.1 dst=192.168.1.119 sport=53 dport=15417 mark=0 use=1
413tcp 6 82 TIME_WAIT src=68.199.193.42 dst=64.1.16.18 sport=38628 dport=443 src=64.1.16.18 dst=68.199.193.42 sport=443 dport=38628 [ASSURED] mark=0 use=1
414udp 17 42 src=192.168.1.113 dst=192.168.1.1 sport=40317 dport=53 src=192.168.1.1 dst=192.168.1.113 sport=53 dport=40317 [ASSURED] mark=0 use=1
415tcp 6 85 TIME_WAIT src=68.199.193.42 dst=64.1.16.3 sport=56252 dport=25 src=64.1.16.3 dst=68.199.193.42 sport=25 dport=56252 [ASSURED] mark=0 use=1
416tcp 6 78 TIME_WAIT src=68.199.193.42 dst=64.1.16.27 sport=58896 dport=25 src=64.1.16.27 dst=68.199.193.42 sport=25 dport=58896 [ASSURED] mark=0 use=1
417tcp 6 77 TIME_WAIT src=68.199.193.42 dst=64.1.16.18 sport=38568 dport=443 src=64.1.16.18 dst=68.199.193.42 sport=443 dport=38568 [ASSURED] mark=0 use=1
418tcp 6 431966 ESTABLISHED src=192.168.1.7 dst=104.107.1.38 sport=41640 dport=443 src=104.107.1.38 dst=68.199.193.42 sport=443 dport=41640 [ASSURED] mark=0 use=1
419tcp 6 431973 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=45810 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=45810 [ASSURED] mark=0 use=1
420tcp 6 431998 ESTABLISHED src=192.168.1.7 dst=31.13.71.1 sport=33476 dport=443 src=31.13.71.1 dst=68.199.193.42 sport=443 dport=33476 [ASSURED] mark=0 use=1
421udp 17 130 src=192.168.1.1 dst=192.168.1.107 sport=5060 dport=5060 src=192.168.1.107 dst=192.168.1.1 sport=5060 dport=5060 [ASSURED] mark=0 use=1
422udp 17 179 src=192.168.1.119 dst=192.168.1.1 sport=24918 dport=53 src=192.168.1.1 dst=192.168.1.119 sport=53 dport=24918 [ASSURED] mark=0 use=1
423tcp 6 81 TIME_WAIT src=68.199.193.42 dst=64.1.16.18 sport=38616 dport=443 src=64.1.16.18 dst=68.199.193.42 sport=443 dport=38616 [ASSURED] mark=0 use=1
424udp 17 15 src=65.55.81.5 dst=68.199.193.44 sport=38040 dport=53 src=68.199.193.44 dst=65.55.81.5 sport=53 dport=38040 mark=0 use=1
425tcp 6 264481 ESTABLISHED src=192.168.1.109 dst=209.85.201.188 sport=59618 dport=5228 src=209.85.201.188 dst=68.199.193.42 sport=5228 dport=59618 [ASSURED] mark=0 use=1
426udp 17 16 src=74.125.47.12 dst=68.199.193.44 sport=43745 dport=53 src=68.199.193.44 dst=74.125.47.12 sport=53 dport=43745 mark=0 use=1
427tcp 6 76 TIME_WAIT src=68.199.193.42 dst=68.199.193.45 sport=35620 dport=25 src=68.199.193.45 dst=68.199.193.42 sport=25 dport=35620 [ASSURED] mark=0 use=1
428tcp 6 54 TIME_WAIT src=127.0.0.1 dst=127.0.0.1 sport=41954 dport=8891 src=127.0.0.1 dst=127.0.0.1 sport=8891 dport=41954 [ASSURED] mark=0 use=1
429udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=54513 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=54513 [ASSURED] mark=0 use=1
430udp 17 42 src=192.168.1.1 dst=192.168.1.1 sport=52557 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=52557 [ASSURED] mark=0 use=1
431tcp 6 431999 ESTABLISHED src=68.199.193.42 dst=68.199.193.45 sport=47484 dport=4949 src=68.199.193.45 dst=68.199.193.42 sport=4949 dport=47484 [ASSURED] mark=0 use=2
432tcp 6 431964 ESTABLISHED src=192.168.1.7 dst=172.217.11.3 sport=33952 dport=443 src=172.217.11.3 dst=68.199.193.42 sport=443 dport=33952 [ASSURED] mark=0 use=1
433tcp 6 431985 ESTABLISHED src=192.168.1.7 dst=52.72.172.181 sport=59756 dport=443 src=52.72.172.181 dst=68.199.193.42 sport=443 dport=59756 [ASSURED] mark=0 use=1
434tcp 6 431999 ESTABLISHED src=68.199.193.42 dst=64.1.16.5 sport=57496 dport=4949 src=64.1.16.5 dst=68.199.193.42 sport=4949 dport=57496 [ASSURED] mark=0 use=1
435udp 17 6 src=68.199.193.42 dst=192.43.172.30 sport=15280 dport=53 src=192.43.172.30 dst=68.199.193.42 sport=53 dport=15280 mark=0 use=1
436tcp 6 66 TIME_WAIT src=68.199.193.42 dst=64.1.16.18 sport=38462 dport=443 src=64.1.16.18 dst=68.199.193.42 sport=443 dport=38462 [ASSURED] mark=0 use=1
437udp 17 12 src=192.168.1.1 dst=192.168.1.1 sport=56426 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=56426 mark=0 use=1
438tcp 6 107 TIME_WAIT src=185.211.245.170 dst=68.199.193.44 sport=17016 dport=587 src=68.199.193.44 dst=185.211.245.170 sport=587 dport=17016 [ASSURED] mark=0 use=1
439tcp 6 77 TIME_WAIT src=68.199.193.42 dst=64.1.16.27 sport=58886 dport=25 src=64.1.16.27 dst=68.199.193.42 sport=25 dport=58886 [ASSURED] mark=0 use=1
440udp 17 2 src=68.199.193.42 dst=216.239.32.10 sport=49327 dport=53 src=216.239.32.10 dst=68.199.193.42 sport=53 dport=49327 mark=0 use=1
441tcp 6 430811 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=45774 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=45774 [ASSURED] mark=0 use=1
442udp 17 113 src=192.168.1.7 dst=192.168.1.1 sport=50762 dport=53 src=192.168.1.1 dst=192.168.1.7 sport=53 dport=50762 [ASSURED] mark=0 use=1
443tcp 6 187 ESTABLISHED src=192.168.1.35 dst=52.165.175.144 sport=65042 dport=443 src=52.165.175.144 dst=68.199.193.42 sport=443 dport=65042 [ASSURED] mark=0 use=1
444tcp 6 431999 ESTABLISHED src=192.168.1.7 dst=31.13.71.1 sport=58164 dport=443 src=31.13.71.1 dst=68.199.193.42 sport=443 dport=58164 [ASSURED] mark=0 use=1
445udp 17 5 src=68.199.193.42 dst=69.31.38.241 sport=33079 dport=53 src=69.31.38.241 dst=68.199.193.42 sport=53 dport=33079 mark=0 use=1
446tcp 6 431956 ESTABLISHED src=192.168.1.7 dst=54.239.31.63 sport=48660 dport=443 src=54.239.31.63 dst=68.199.193.42 sport=443 dport=48660 [ASSURED] mark=0 use=1
447tcp 6 70 TIME_WAIT src=68.199.193.42 dst=64.1.16.27 sport=58800 dport=25 src=64.1.16.27 dst=68.199.193.42 sport=25 dport=58800 [ASSURED] mark=0 use=1
448tcp 6 87 TIME_WAIT src=68.199.193.42 dst=68.199.193.45 sport=35722 dport=25 src=68.199.193.45 dst=68.199.193.42 sport=25 dport=35722 [ASSURED] mark=0 use=1
449tcp 6 70 TIME_WAIT src=68.199.193.42 dst=65.22.197.1 sport=48665 dport=53 src=65.22.197.1 dst=68.199.193.42 sport=53 dport=48665 [ASSURED] mark=0 use=1
450udp 17 386 src=37.49.231.174 dst=68.199.193.46 sport=5089 dport=5060 [UNREPLIED] src=68.199.193.46 dst=37.49.231.174 sport=5060 dport=5089 mark=0 helper=sip use=1
451tcp 6 185 ESTABLISHED src=192.168.1.35 dst=68.199.193.42 sport=60474 dport=993 src=68.199.193.42 dst=192.168.1.35 sport=993 dport=60474 [ASSURED] mark=0 use=1
452tcp 6 58 TIME_WAIT src=192.168.1.23 dst=23.246.7.192 sport=57477 dport=80 src=23.246.7.192 dst=68.199.193.42 sport=80 dport=57477 [ASSURED] mark=0 use=1
453tcp 6 430805 ESTABLISHED src=192.168.1.7 dst=173.194.207.109 sport=35270 dport=993 src=173.194.207.109 dst=68.199.193.42 sport=993 dport=35270 [ASSURED] mark=0 use=1
454tcp 6 430856 ESTABLISHED src=192.168.1.7 dst=64.1.16.5 sport=40872 dport=993 src=64.1.16.5 dst=68.199.193.42 sport=993 dport=40872 [ASSURED] mark=0 use=1
455udp 17 6 src=192.168.1.120 dst=52.168.138.145 sport=4097 dport=123 src=52.168.138.145 dst=68.199.193.42 sport=123 dport=4097 mark=0 use=1
456tcp 6 76 TIME_WAIT src=68.199.193.42 dst=66.104.218.100 sport=44394 dport=443 src=66.104.218.100 dst=68.199.193.42 sport=443 dport=44394 [ASSURED] mark=0 use=1
457tcp 6 41 TIME_WAIT src=185.211.245.170 dst=68.199.193.44 sport=16086 dport=587 src=68.199.193.44 dst=185.211.245.170 sport=587 dport=16086 [ASSURED] mark=0 use=1
458tcp 6 429365 ESTABLISHED src=192.168.1.7 dst=68.192.251.223 sport=51162 dport=22 src=68.192.251.223 dst=68.199.193.42 sport=22 dport=51162 [ASSURED] mark=0 use=1
459tcp 6 431998 ESTABLISHED src=192.168.1.7 dst=31.13.71.1 sport=35386 dport=443 src=31.13.71.1 dst=68.199.193.42 sport=443 dport=35386 [ASSURED] mark=0 use=1
460tcp 6 92 SYN_SENT src=42.159.11.141 dst=68.199.193.46 sport=3494 dport=23 [UNREPLIED] src=68.199.193.46 dst=42.159.11.141 sport=23 dport=3494 mark=0 use=1
461udp 17 14 src=157.56.96.4 dst=68.199.193.44 sport=23549 dport=53 src=68.199.193.44 dst=157.56.96.4 sport=53 dport=23549 mark=0 use=1
462tcp 6 431994 ESTABLISHED src=192.168.1.7 dst=64.1.16.5 sport=35118 dport=993 src=64.1.16.5 dst=68.199.193.42 sport=993 dport=35118 [ASSURED] mark=0 use=1
463tcp 6 431973 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=44680 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=44680 [ASSURED] mark=0 use=1
464tcp 6 42 SYN_SENT src=185.176.26.33 dst=68.199.193.46 sport=55513 dport=14290 [UNREPLIED] src=68.199.193.46 dst=185.176.26.33 sport=14290 dport=55513 mark=0 use=1
465udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=51022 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=51022 [ASSURED] mark=0 use=1
466tcp 6 66 TIME_WAIT src=68.199.193.42 dst=66.104.218.100 sport=44300 dport=443 src=66.104.218.100 dst=68.199.193.42 sport=443 dport=44300 [ASSURED] mark=0 use=1
467udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=38072 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=38072 [ASSURED] mark=0 use=1
468tcp 6 431999 ESTABLISHED src=185.211.245.170 dst=68.199.193.44 sport=62294 dport=587 src=68.199.193.44 dst=185.211.245.170 sport=587 dport=62294 [ASSURED] mark=0 use=1
469tcp 6 430811 ESTABLISHED src=192.168.1.7 dst=173.194.207.109 sport=35264 dport=993 src=173.194.207.109 dst=68.199.193.42 sport=993 dport=35264 [ASSURED] mark=0 use=1
470tcp 6 431960 ESTABLISHED src=192.168.1.7 dst=23.215.130.211 sport=47062 dport=80 src=23.215.130.211 dst=68.199.193.42 sport=80 dport=47062 [ASSURED] mark=0 use=1
471tcp 6 72 TIME_WAIT src=68.199.193.42 dst=68.199.193.45 sport=35572 dport=25 src=68.199.193.45 dst=68.199.193.42 sport=25 dport=35572 [ASSURED] mark=0 use=2
472tcp 6 332526 ESTABLISHED src=192.168.1.35 dst=52.173.26.181 sport=62590 dport=443 src=52.173.26.181 dst=68.199.193.42 sport=443 dport=62590 [ASSURED] mark=0 use=1
473tcp 6 431989 ESTABLISHED src=192.168.1.7 dst=52.203.197.63 sport=42214 dport=443 src=52.203.197.63 dst=68.199.193.42 sport=443 dport=42214 [ASSURED] mark=0 use=1
474tcp 6 430870 ESTABLISHED src=192.168.1.7 dst=64.1.16.23 sport=59880 dport=993 src=64.1.16.23 dst=68.199.193.42 sport=993 dport=59880 [ASSURED] mark=0 use=1
475tcp 6 431981 ESTABLISHED src=192.168.1.7 dst=172.217.10.227 sport=38464 dport=443 src=172.217.10.227 dst=68.199.193.42 sport=443 dport=38464 [ASSURED] mark=0 use=1
476udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=48363 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=48363 [ASSURED] mark=0 use=1
477udp 17 9 src=81.211.13.146 dst=68.199.193.44 sport=61418 dport=53 src=68.199.193.44 dst=81.211.13.146 sport=53 dport=61418 mark=0 use=1
478tcp 6 75 TIME_WAIT src=68.199.193.42 dst=66.104.218.100 sport=44382 dport=443 src=66.104.218.100 dst=68.199.193.42 sport=443 dport=44382 [ASSURED] mark=0 use=1
479tcp 6 89 TIME_WAIT src=68.199.193.42 dst=64.1.16.3 sport=56282 dport=25 src=64.1.16.3 dst=68.199.193.42 sport=25 dport=56282 [ASSURED] mark=0 use=1
480udp 17 17 src=137.74.213.144 dst=68.199.193.44 sport=24491 dport=53 src=68.199.193.44 dst=137.74.213.144 sport=53 dport=24491 mark=0 use=1
481udp 17 26 src=146.112.133.69 dst=68.199.193.44 sport=33742 dport=53 src=68.199.193.44 dst=146.112.133.69 sport=53 dport=33742 mark=0 use=1
482udp 17 16 src=172.217.46.67 dst=68.199.193.44 sport=63598 dport=53 src=68.199.193.44 dst=172.217.46.67 sport=53 dport=63598 mark=0 use=1
483tcp 6 431956 ESTABLISHED src=192.168.1.7 dst=34.196.57.87 sport=59052 dport=443 src=34.196.57.87 dst=68.199.193.42 sport=443 dport=59052 [ASSURED] mark=0 use=1
484udp 17 23 src=68.199.193.42 dst=204.74.108.1 sport=29041 dport=53 src=204.74.108.1 dst=68.199.193.42 sport=53 dport=29041 mark=0 use=1
485udp 17 23 src=192.168.1.113 dst=192.168.1.1 sport=40802 dport=53 src=192.168.1.1 dst=192.168.1.113 sport=53 dport=40802 mark=0 use=1
486tcp 6 431973 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=45782 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=45782 [ASSURED] mark=0 use=1
487tcp 6 431973 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=45778 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=45778 [ASSURED] mark=0 use=1
488udp 17 23 src=68.199.193.42 dst=34.196.62.143 sport=9785 dport=53 src=34.196.62.143 dst=68.199.193.42 sport=53 dport=9785 mark=0 use=1
489tcp 6 431993 ESTABLISHED src=192.168.1.7 dst=66.104.218.100 sport=51308 dport=143 src=66.104.218.100 dst=68.199.193.42 sport=143 dport=51308 [ASSURED] mark=0 use=1
490tcp 6 62 TIME_WAIT src=68.199.193.42 dst=64.1.16.18 sport=38448 dport=443 src=64.1.16.18 dst=68.199.193.42 sport=443 dport=38448 [ASSURED] mark=0 use=1
491udp 17 171 src=192.168.1.1 dst=192.168.1.1 sport=33081 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=33081 [ASSURED] mark=0 use=1
492udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=48586 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=48586 [ASSURED] mark=0 use=1
493tcp 6 80 TIME_WAIT src=68.199.193.42 dst=64.1.16.3 sport=56210 dport=25 src=64.1.16.3 dst=68.199.193.42 sport=25 dport=56210 [ASSURED] mark=0 use=1
494unknown 2 478 src=192.168.0.1 dst=224.0.0.1 [UNREPLIED] src=224.0.0.1 dst=68.199.193.42 mark=0 use=1
495tcp 6 70 TIME_WAIT src=64.1.16.3 dst=68.199.193.42 sport=53242 dport=25 src=68.199.193.42 dst=64.1.16.3 sport=25 dport=53242 [ASSURED] mark=0 use=1
496tcp 6 367935 ESTABLISHED src=192.168.1.35 dst=52.173.28.179 sport=60128 dport=443 src=52.173.28.179 dst=68.199.193.42 sport=443 dport=60128 [ASSURED] mark=0 use=1
497tcp 6 431997 ESTABLISHED src=192.168.1.7 dst=31.13.71.1 sport=60120 dport=443 src=31.13.71.1 dst=68.199.193.42 sport=443 dport=60120 [ASSURED] mark=0 use=1
498tcp 6 431974 ESTABLISHED src=192.168.1.114 dst=52.46.132.49 sport=38665 dport=443 src=52.46.132.49 dst=68.199.193.42 sport=443 dport=38665 [ASSURED] mark=0 use=1
499tcp 6 63 TIME_WAIT src=68.199.193.42 dst=64.1.16.18 sport=38450 dport=443 src=64.1.16.18 dst=68.199.193.42 sport=443 dport=38450 [ASSURED] mark=0 use=1
500tcp 6 21 TIME_WAIT src=192.168.1.7 dst=52.72.184.229 sport=51330 dport=443 src=52.72.184.229 dst=68.199.193.42 sport=443 dport=51330 [ASSURED] mark=0 use=1
501udp 17 162 src=68.199.193.42 dst=68.199.193.42 sport=59820 dport=161 src=68.199.193.42 dst=68.199.193.42 sport=161 dport=59820 [ASSURED] mark=0 helper=snmp use=1
502tcp 6 431994 ESTABLISHED src=192.168.1.7 dst=64.1.16.5 sport=40878 dport=993 src=64.1.16.5 dst=68.199.193.42 sport=993 dport=40878 [ASSURED] mark=0 use=1
503tcp 6 111 TIME_WAIT src=127.0.0.1 dst=127.0.0.1 sport=50053 dport=953 src=127.0.0.1 dst=127.0.0.1 sport=953 dport=50053 [ASSURED] mark=0 use=1
504tcp 6 87 TIME_WAIT src=68.199.193.42 dst=64.1.16.27 sport=58978 dport=25 src=64.1.16.27 dst=68.199.193.42 sport=25 dport=58978 [ASSURED] mark=0 use=1
505tcp 6 73 TIME_WAIT src=68.199.193.42 dst=64.1.16.3 sport=56126 dport=25 src=64.1.16.3 dst=68.199.193.42 sport=25 dport=56126 [ASSURED] mark=0 use=1
506tcp 6 75 TIME_WAIT src=68.199.193.42 dst=64.1.16.27 sport=58860 dport=25 src=64.1.16.27 dst=68.199.193.42 sport=25 dport=58860 [ASSURED] mark=0 use=1
507tcp 6 431999 ESTABLISHED src=192.168.1.119 dst=172.217.3.99 sport=46756 dport=80 src=172.217.3.99 dst=68.199.193.42 sport=80 dport=46756 [ASSURED] mark=0 use=1
508tcp 6 88 TIME_WAIT src=68.199.193.42 dst=64.1.16.5 sport=59696 dport=25 src=64.1.16.5 dst=68.199.193.42 sport=25 dport=59696 [ASSURED] mark=0 use=1
509udp 17 29 src=168.245.84.13 dst=68.199.193.44 sport=50183 dport=53 src=68.199.193.44 dst=168.245.84.13 sport=53 dport=50183 mark=0 use=1
510udp 17 1134 src=62.210.29.135 dst=68.199.193.46 sport=5543 dport=5060 [UNREPLIED] src=68.199.193.46 dst=62.210.29.135 sport=5060 dport=5543 mark=0 helper=sip use=1
511tcp 6 69 TIME_WAIT src=68.199.193.42 dst=64.1.16.18 sport=38482 dport=443 src=64.1.16.18 dst=68.199.193.42 sport=443 dport=38482 [ASSURED] mark=0 use=1
512udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=52983 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=52983 [ASSURED] mark=0 use=1
513udp 17 6 src=68.199.193.42 dst=84.53.139.129 sport=29021 dport=53 src=84.53.139.129 dst=68.199.193.42 sport=53 dport=29021 mark=0 use=2
514tcp 6 431974 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=44872 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=44872 [ASSURED] mark=0 use=1
515udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=37945 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=37945 [ASSURED] mark=0 use=1
516tcp 6 431940 ESTABLISHED src=192.168.1.23 dst=23.246.7.176 sport=57841 dport=80 src=23.246.7.176 dst=68.199.193.42 sport=80 dport=57841 [ASSURED] mark=0 use=1
517tcp 6 431994 ESTABLISHED src=192.168.1.7 dst=64.1.16.5 sport=40876 dport=993 src=64.1.16.5 dst=68.199.193.42 sport=993 dport=40876 [ASSURED] mark=0 use=1
518tcp 6 431960 ESTABLISHED src=192.168.1.7 dst=209.185.166.10 sport=49378 dport=443 src=209.185.166.10 dst=68.199.193.42 sport=443 dport=49378 [ASSURED] mark=0 use=1
519udp 17 15 src=68.199.193.42 dst=205.251.197.203 sport=31844 dport=53 src=205.251.197.203 dst=68.199.193.42 sport=53 dport=31844 mark=0 use=1
520tcp 6 431939 ESTABLISHED src=192.168.1.7 dst=192.168.1.100 sport=55374 dport=445 src=192.168.1.100 dst=192.168.1.7 sport=445 dport=55374 [ASSURED] mark=0 use=1
521tcp 6 431988 ESTABLISHED src=192.168.1.35 dst=172.217.10.227 sport=49240 dport=443 src=172.217.10.227 dst=68.199.193.42 sport=443 dport=49240 [ASSURED] mark=0 use=1
522udp 17 8 src=108.162.217.86 dst=68.199.193.44 sport=35192 dport=53 src=68.199.193.44 dst=108.162.217.86 sport=53 dport=35192 mark=0 use=1
523tcp 6 73 TIME_WAIT src=68.199.193.42 dst=66.104.218.100 sport=44358 dport=443 src=66.104.218.100 dst=68.199.193.42 sport=443 dport=44358 [ASSURED] mark=0 use=1
524tcp 6 74 TIME_WAIT src=68.199.193.42 dst=64.1.16.27 sport=58848 dport=25 src=64.1.16.27 dst=68.199.193.42 sport=25 dport=58848 [ASSURED] mark=0 use=1
525tcp 6 12 TIME_WAIT src=127.0.0.1 dst=127.0.0.1 sport=41950 dport=8891 src=127.0.0.1 dst=127.0.0.1 sport=8891 dport=41950 [ASSURED] mark=0 use=1
526tcp 6 83 TIME_WAIT src=68.199.193.42 dst=64.1.16.5 sport=59666 dport=25 src=64.1.16.5 dst=68.199.193.42 sport=25 dport=59666 [ASSURED] mark=0 use=1
527tcp 6 431999 ESTABLISHED src=192.168.1.7 dst=192.168.1.1 sport=43462 dport=22 src=192.168.1.1 dst=192.168.1.7 sport=22 dport=43462 [ASSURED] mark=0 use=1
528udp 17 16 src=192.168.1.1 dst=192.168.1.1 sport=57068 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=57068 mark=0 use=1
529tcp 6 431972 ESTABLISHED src=192.168.1.7 dst=34.206.66.2 sport=33612 dport=443 src=34.206.66.2 dst=68.199.193.42 sport=443 dport=33612 [ASSURED] mark=0 use=1
530tcp 6 20 TIME_WAIT src=127.0.0.1 dst=127.0.0.1 sport=41946 dport=8891 src=127.0.0.1 dst=127.0.0.1 sport=8891 dport=41946 [ASSURED] mark=0 use=1
531udp 17 129 src=192.168.1.1 dst=192.168.1.1 sport=57883 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=57883 [ASSURED] mark=0 use=1
532tcp 6 431999 ESTABLISHED src=192.168.1.7 dst=54.84.71.9 sport=35838 dport=443 src=54.84.71.9 dst=68.199.193.42 sport=443 dport=35838 [ASSURED] mark=0 use=1
533tcp 6 105 TIME_WAIT src=127.0.0.1 dst=127.0.0.1 sport=42084 dport=8891 src=127.0.0.1 dst=127.0.0.1 sport=8891 dport=42084 [ASSURED] mark=0 use=1
534udp 17 23 src=68.199.193.42 dst=204.74.108.1 sport=16706 dport=53 src=204.74.108.1 dst=68.199.193.42 sport=53 dport=16706 mark=0 use=1
535tcp 6 431994 ESTABLISHED src=192.168.1.119 dst=172.217.3.100 sport=47728 dport=443 src=172.217.3.100 dst=68.199.193.42 sport=443 dport=47728 [ASSURED] mark=0 use=1
536udp 17 13 src=76.175.254.77 dst=68.199.193.42 sport=8999 dport=63320 [UNREPLIED] src=192.168.1.7 dst=76.175.254.77 sport=63320 dport=8999 mark=0 use=1
537tcp 6 72 TIME_WAIT src=68.199.193.42 dst=64.1.16.18 sport=38520 dport=443 src=64.1.16.18 dst=68.199.193.42 sport=443 dport=38520 [ASSURED] mark=0 use=1
538tcp 6 431960 ESTABLISHED src=192.168.1.7 dst=209.185.166.10 sport=49374 dport=443 src=209.185.166.10 dst=68.199.193.42 sport=443 dport=49374 [ASSURED] mark=0 use=1
539tcp 6 72 TIME_WAIT src=68.199.193.42 dst=64.1.16.5 sport=59536 dport=25 src=64.1.16.5 dst=68.199.193.42 sport=25 dport=59536 [ASSURED] mark=0 use=1
540udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=59736 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=59736 [ASSURED] mark=0 use=1
541udp 17 7 src=59.18.54.67 dst=68.199.193.44 sport=49454 dport=53 src=68.199.193.44 dst=59.18.54.67 sport=53 dport=49454 mark=0 use=1
542tcp 6 414036 ESTABLISHED src=192.168.1.109 dst=173.194.175.188 sport=46806 dport=5228 src=173.194.175.188 dst=68.199.193.42 sport=5228 dport=46806 [ASSURED] mark=0 use=1
543tcp 6 13 TIME_WAIT src=64.1.16.3 dst=68.199.193.42 sport=53216 dport=25 src=68.199.193.42 dst=64.1.16.3 sport=25 dport=53216 [ASSURED] mark=0 use=1
544tcp 6 431959 ESTABLISHED src=192.168.1.35 dst=173.223.56.127 sport=65153 dport=443 src=173.223.56.127 dst=68.199.193.42 sport=443 dport=65153 [ASSURED] mark=0 use=1
545tcp 6 73 TIME_WAIT src=68.199.193.42 dst=68.199.193.45 sport=35584 dport=25 src=68.199.193.45 dst=68.199.193.42 sport=25 dport=35584 [ASSURED] mark=0 use=1
546tcp 6 431976 ESTABLISHED src=192.168.1.7 dst=67.217.81.10 sport=58432 dport=443 src=67.217.81.10 dst=68.199.193.42 sport=443 dport=58432 [ASSURED] mark=0 use=1
547tcp 6 431880 ESTABLISHED src=192.168.1.7 dst=64.1.16.23 sport=54104 dport=993 src=64.1.16.23 dst=68.199.193.42 sport=993 dport=54104 [ASSURED] mark=0 use=1
548tcp 6 431972 ESTABLISHED src=192.168.1.7 dst=172.217.10.46 sport=46130 dport=443 src=172.217.10.46 dst=68.199.193.42 sport=443 dport=46130 [ASSURED] mark=0 use=1
549tcp 6 89 TIME_WAIT src=68.199.193.42 dst=64.1.16.5 sport=59704 dport=25 src=64.1.16.5 dst=68.199.193.42 sport=25 dport=59704 [ASSURED] mark=0 use=1
550udp 17 162 src=192.168.1.1 dst=192.168.1.1 sport=41309 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=41309 [ASSURED] mark=0 use=1
551udp 17 8 src=59.18.54.69 dst=68.199.193.44 sport=60141 dport=53 src=68.199.193.44 dst=59.18.54.69 sport=53 dport=60141 mark=0 use=1
552tcp 6 81 TIME_WAIT src=68.199.193.42 dst=64.1.16.3 sport=56222 dport=25 src=64.1.16.3 dst=68.199.193.42 sport=25 dport=56222 [ASSURED] mark=0 use=1
553tcp 6 431994 ESTABLISHED src=192.168.1.119 dst=173.194.204.188 sport=55876 dport=5228 src=173.194.204.188 dst=68.199.193.42 sport=5228 dport=55876 [ASSURED] mark=0 use=1
554udp 17 12 src=192.168.1.1 dst=192.168.1.1 sport=58439 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=58439 mark=0 use=2
555tcp 6 69 TIME_WAIT src=192.168.1.7 dst=173.223.56.127 sport=57118 dport=443 src=173.223.56.127 dst=68.199.193.42 sport=443 dport=57118 [ASSURED] mark=0 use=1
556udp 17 161 src=192.168.1.114 dst=23.23.189.18 sport=35247 dport=33434 src=23.23.189.18 dst=68.199.193.42 sport=33434 dport=35247 [ASSURED] mark=0 use=1
557udp 17 42 src=192.168.1.113 dst=192.168.1.1 sport=34125 dport=53 src=192.168.1.1 dst=192.168.1.113 sport=53 dport=34125 [ASSURED] mark=0 use=1
558tcp 6 247162 ESTABLISHED src=192.168.1.35 dst=173.194.206.188 sport=55561 dport=5228 src=173.194.206.188 dst=68.199.193.42 sport=5228 dport=55561 [ASSURED] mark=0 use=1
559tcp 6 208407 ESTABLISHED src=192.168.1.18 dst=52.173.24.17 sport=50417 dport=443 src=52.173.24.17 dst=68.199.193.42 sport=443 dport=50417 [ASSURED] mark=0 use=1
560tcp 6 79 TIME_WAIT src=68.199.193.42 dst=64.1.16.3 sport=56198 dport=25 src=64.1.16.3 dst=68.199.193.42 sport=25 dport=56198 [ASSURED] mark=0 use=1
561tcp 6 431973 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=44678 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=44678 [ASSURED] mark=0 use=1
562tcp 6 94 TIME_WAIT src=192.168.1.120 dst=107.170.198.71 sport=20427 dport=80 src=107.170.198.71 dst=68.199.193.42 sport=80 dport=20427 [ASSURED] mark=0 use=1
563tcp 6 376127 ESTABLISHED src=192.168.1.18 dst=52.173.26.181 sport=49682 dport=443 src=52.173.26.181 dst=68.199.193.42 sport=443 dport=49682 [ASSURED] mark=0 use=1
564udp 17 24 src=68.199.193.42 dst=216.239.32.10 sport=29324 dport=53 src=216.239.32.10 dst=68.199.193.42 sport=53 dport=29324 mark=0 use=1
565tcp 6 431964 ESTABLISHED src=192.168.1.7 dst=209.185.166.68 sport=54226 dport=443 src=209.185.166.68 dst=68.199.193.42 sport=443 dport=54226 [ASSURED] mark=0 use=1
566tcp 6 431955 ESTABLISHED src=192.168.1.7 dst=184.86.75.248 sport=42078 dport=443 src=184.86.75.248 dst=68.199.193.42 sport=443 dport=42078 [ASSURED] mark=0 use=1
567udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=50496 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=50496 [ASSURED] mark=0 use=1
568tcp 6 81 TIME_WAIT src=68.199.193.42 dst=64.1.16.27 sport=58932 dport=25 src=64.1.16.27 dst=68.199.193.42 sport=25 dport=58932 [ASSURED] mark=0 use=1
569tcp 6 102 TIME_WAIT src=192.168.1.1 dst=192.168.1.100 sport=57678 dport=80 src=192.168.1.100 dst=192.168.1.1 sport=80 dport=57678 [ASSURED] mark=0 use=1
570udp 17 24 src=192.168.1.119 dst=192.168.1.1 sport=30217 dport=53 src=192.168.1.1 dst=192.168.1.119 sport=53 dport=30217 mark=0 use=1
571udp 17 23 src=0.0.0.0 dst=255.255.255.255 sport=68 dport=67 [UNREPLIED] src=255.255.255.255 dst=0.0.0.0 sport=67 dport=68 mark=0 use=1
572tcp 6 70 TIME_WAIT src=68.199.193.42 dst=68.199.193.45 sport=35548 dport=25 src=68.199.193.45 dst=68.199.193.42 sport=25 dport=35548 [ASSURED] mark=0 use=1
573unknown 2 583 src=192.168.1.3 dst=224.0.0.1 [UNREPLIED] src=224.0.0.1 dst=192.168.1.3 mark=0 use=1
574tcp 6 69 TIME_WAIT src=68.199.193.42 dst=64.1.16.5 sport=59498 dport=25 src=64.1.16.5 dst=68.199.193.42 sport=25 dport=59498 [ASSURED] mark=0 use=1
575tcp 6 16 TIME_WAIT src=185.211.245.170 dst=68.199.193.44 sport=39176 dport=587 src=68.199.193.44 dst=185.211.245.170 sport=587 dport=39176 [ASSURED] mark=0 use=1
576tcp 6 431964 ESTABLISHED src=192.168.1.35 dst=172.217.10.46 sport=64033 dport=443 src=172.217.10.46 dst=68.199.193.42 sport=443 dport=64033 [ASSURED] mark=0 use=1
577udp 17 129 src=192.168.1.1 dst=192.168.1.1 sport=54272 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=54272 [ASSURED] mark=0 use=1
578tcp 6 72 TIME_WAIT src=68.199.193.42 dst=64.1.16.3 sport=56114 dport=25 src=64.1.16.3 dst=68.199.193.42 sport=25 dport=56114 [ASSURED] mark=0 use=1
579udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=59586 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=59586 [ASSURED] mark=0 use=1
580tcp 6 63 TIME_WAIT src=68.199.193.42 dst=66.104.218.100 sport=44288 dport=443 src=66.104.218.100 dst=68.199.193.42 sport=443 dport=44288 [ASSURED] mark=0 use=1
581tcp 6 431978 ESTABLISHED src=192.168.1.7 dst=198.252.206.25 sport=41110 dport=443 src=198.252.206.25 dst=68.199.193.42 sport=443 dport=41110 [ASSURED] mark=0 use=1
582udp 17 14 src=165.254.102.79 dst=68.199.193.44 sport=46144 dport=53 src=68.199.193.44 dst=165.254.102.79 sport=53 dport=46144 mark=0 use=1
583tcp 6 86 TIME_WAIT src=192.168.1.7 dst=172.217.10.46 sport=44200 dport=443 src=172.217.10.46 dst=68.199.193.42 sport=443 dport=44200 [ASSURED] mark=0 use=1
584udp 17 4 src=68.199.193.42 dst=216.239.36.10 sport=22113 dport=53 src=216.239.36.10 dst=68.199.193.42 sport=53 dport=22113 mark=0 use=1
585tcp 6 431993 ESTABLISHED src=192.168.1.7 dst=31.13.71.1 sport=60344 dport=443 src=31.13.71.1 dst=68.199.193.42 sport=443 dport=60344 [ASSURED] mark=0 use=1
586udp 17 6 src=68.199.193.42 dst=8.254.13.2 sport=28635 dport=53 src=8.254.13.2 dst=68.199.193.42 sport=53 dport=28635 mark=0 use=1
587tcp 6 117 TIME_WAIT src=192.168.1.7 dst=18.214.91.159 sport=39824 dport=443 src=18.214.91.159 dst=68.199.193.42 sport=443 dport=39824 [ASSURED] mark=0 use=1
588udp 17 165 src=192.168.1.23 dst=192.168.1.1 sport=33585 dport=53 src=192.168.1.1 dst=192.168.1.23 sport=53 dport=33585 [ASSURED] mark=0 use=1
589tcp 6 291667 ESTABLISHED src=192.168.1.109 dst=173.194.204.188 sport=53356 dport=5228 src=173.194.204.188 dst=68.199.193.42 sport=5228 dport=53356 [ASSURED] mark=0 use=1
590tcp 6 431983 ESTABLISHED src=192.168.1.7 dst=172.217.12.174 sport=33150 dport=443 src=172.217.12.174 dst=68.199.193.42 sport=443 dport=33150 [ASSURED] mark=0 use=1
591tcp 6 286 ESTABLISHED src=127.0.0.1 dst=127.0.0.1 sport=42236 dport=8891 src=127.0.0.1 dst=127.0.0.1 sport=8891 dport=42236 [ASSURED] mark=0 use=1
592tcp 6 29 TIME_WAIT src=192.168.1.7 dst=104.117.21.124 sport=44376 dport=443 src=104.117.21.124 dst=68.199.193.42 sport=443 dport=44376 [ASSURED] mark=0 use=1
593tcp 6 337316 ESTABLISHED src=192.168.1.105 dst=52.165.171.165 sport=58356 dport=443 src=52.165.171.165 dst=68.199.193.42 sport=443 dport=58356 [ASSURED] mark=0 use=1
594unknown 2 551 src=192.168.1.120 dst=224.0.0.1 [UNREPLIED] src=224.0.0.1 dst=192.168.1.120 mark=0 use=1
595tcp 6 431960 ESTABLISHED src=192.168.1.7 dst=151.101.210.133 sport=38010 dport=443 src=151.101.210.133 dst=68.199.193.42 sport=443 dport=38010 [ASSURED] mark=0 use=1
596tcp 6 40 TIME_WAIT src=127.0.0.1 dst=127.0.0.1 sport=41952 dport=8891 src=127.0.0.1 dst=127.0.0.1 sport=8891 dport=41952 [ASSURED] mark=0 use=2
597tcp 6 82 TIME_WAIT src=68.199.193.42 dst=64.1.16.3 sport=56234 dport=25 src=64.1.16.3 dst=68.199.193.42 sport=25 dport=56234 [ASSURED] mark=0 use=1
598udp 17 157 src=192.168.1.1 dst=192.168.1.115 sport=5060 dport=5060 src=192.168.1.115 dst=192.168.1.1 sport=5060 dport=5060 [ASSURED] mark=0 use=1
599tcp 6 67 TIME_WAIT src=68.199.193.42 dst=64.1.16.18 sport=38466 dport=443 src=64.1.16.18 dst=68.199.193.42 sport=443 dport=38466 [ASSURED] mark=0 use=1
600tcp 6 79 TIME_WAIT src=68.199.193.42 dst=66.104.218.100 sport=44438 dport=443 src=66.104.218.100 dst=68.199.193.42 sport=443 dport=44438 [ASSURED] mark=0 use=1
601tcp 6 53 SYN_SENT src=176.119.4.73 dst=68.199.193.46 sport=45287 dport=6227 [UNREPLIED] src=68.199.193.46 dst=176.119.4.73 sport=6227 dport=45287 mark=0 use=1
602tcp 6 414629 ESTABLISHED src=192.168.1.35 dst=13.89.187.212 sport=60424 dport=443 src=13.89.187.212 dst=68.199.193.42 sport=443 dport=60424 [ASSURED] mark=0 use=1
603tcp 6 118 TIME_WAIT src=68.199.193.42 dst=64.1.16.8 sport=58438 dport=4949 src=64.1.16.8 dst=68.199.193.42 sport=4949 dport=58438 [ASSURED] mark=0 use=1
604udp 17 3 src=68.199.193.42 dst=45.57.9.1 sport=2981 dport=53 src=45.57.9.1 dst=68.199.193.42 sport=53 dport=2981 mark=0 use=1
605tcp 6 431960 ESTABLISHED src=192.168.1.7 dst=209.185.166.10 sport=49376 dport=443 src=209.185.166.10 dst=68.199.193.42 sport=443 dport=49376 [ASSURED] mark=0 use=1
606udp 17 17 src=137.74.213.144 dst=68.199.193.44 sport=45341 dport=53 src=68.199.193.44 dst=137.74.213.144 sport=53 dport=45341 mark=0 use=1
607tcp 6 431993 ESTABLISHED src=192.168.1.7 dst=31.13.71.1 sport=57682 dport=443 src=31.13.71.1 dst=68.199.193.42 sport=443 dport=57682 [ASSURED] mark=0 use=1
608udp 17 8 src=34.224.74.250 dst=68.199.193.44 sport=14382 dport=53 src=68.199.193.44 dst=34.224.74.250 sport=53 dport=14382 mark=0 use=1
609udp 17 7 src=68.199.193.42 dst=173.255.246.13 sport=123 dport=123 [UNREPLIED] src=173.255.246.13 dst=68.199.193.42 sport=123 dport=123 mark=0 use=1
610tcp 6 431956 ESTABLISHED src=192.168.1.7 dst=172.217.12.134 sport=55546 dport=443 src=172.217.12.134 dst=68.199.193.42 sport=443 dport=55546 [ASSURED] mark=0 use=1
611tcp 6 82 TIME_WAIT src=68.199.193.42 dst=68.199.193.45 sport=35684 dport=25 src=68.199.193.45 dst=68.199.193.42 sport=25 dport=35684 [ASSURED] mark=0 use=1
612tcp 6 14 TIME_WAIT src=127.0.0.1 dst=127.0.0.1 sport=41944 dport=8891 src=127.0.0.1 dst=127.0.0.1 sport=8891 dport=41944 [ASSURED] mark=0 use=1
613tcp 6 430867 ESTABLISHED src=192.168.1.7 dst=64.1.16.23 sport=59870 dport=993 src=64.1.16.23 dst=68.199.193.42 sport=993 dport=59870 [ASSURED] mark=0 use=1
614tcp 6 74 TIME_WAIT src=68.199.193.42 dst=64.1.16.18 sport=38532 dport=443 src=64.1.16.18 dst=68.199.193.42 sport=443 dport=38532 [ASSURED] mark=0 use=1
615tcp 6 75 TIME_WAIT src=68.199.193.42 dst=64.1.16.3 sport=56150 dport=25 src=64.1.16.3 dst=68.199.193.42 sport=25 dport=56150 [ASSURED] mark=0 use=1
616tcp 6 431974 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=45838 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=45838 [ASSURED] mark=0 use=1
617tcp 6 111 TIME_WAIT src=127.0.0.1 dst=127.0.0.1 sport=34233 dport=953 src=127.0.0.1 dst=127.0.0.1 sport=953 dport=34233 [ASSURED] mark=0 use=1
618tcp 6 431993 ESTABLISHED src=192.168.1.7 dst=66.104.218.100 sport=51306 dport=143 src=66.104.218.100 dst=68.199.193.42 sport=143 dport=51306 [ASSURED] mark=0 use=1
619tcp 6 431940 ESTABLISHED src=192.168.1.23 dst=23.246.7.176 sport=57840 dport=80 src=23.246.7.176 dst=68.199.193.42 sport=80 dport=57840 [ASSURED] mark=0 use=1
620tcp 6 431973 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=45816 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=45816 [ASSURED] mark=0 use=1
621tcp 6 431960 ESTABLISHED src=192.168.1.7 dst=35.201.75.239 sport=39842 dport=443 src=35.201.75.239 dst=68.199.193.42 sport=443 dport=39842 [ASSURED] mark=0 use=1
622tcp 6 80 TIME_WAIT src=68.199.193.42 dst=64.1.16.27 sport=58920 dport=25 src=64.1.16.27 dst=68.199.193.42 sport=25 dport=58920 [ASSURED] mark=0 use=1
623tcp 6 68 TIME_WAIT src=68.199.193.42 dst=66.104.218.100 sport=44308 dport=443 src=66.104.218.100 dst=68.199.193.42 sport=443 dport=44308 [ASSURED] mark=0 use=1
624tcp 6 428945 ESTABLISHED src=192.168.1.7 dst=64.1.16.4 sport=47830 dport=22 src=64.1.16.4 dst=68.199.193.42 sport=22 dport=47830 [ASSURED] mark=0 use=1
625tcp 6 431992 ESTABLISHED src=192.168.1.7 dst=31.13.71.1 sport=58064 dport=443 src=31.13.71.1 dst=68.199.193.42 sport=443 dport=58064 [ASSURED] mark=0 use=1
626udp 17 6 src=68.199.193.42 dst=8.254.13.2 sport=34956 dport=53 src=8.254.13.2 dst=68.199.193.42 sport=53 dport=34956 mark=0 use=1
627tcp 6 240724 ESTABLISHED src=192.168.1.109 dst=173.194.206.188 sport=60366 dport=5228 src=173.194.206.188 dst=68.199.193.42 sport=5228 dport=60366 [ASSURED] mark=0 use=1
628icmp 1 24 src=192.168.1.119 dst=192.168.1.1 type=8 code=0 id=31511 src=192.168.1.1 dst=192.168.1.119 type=0 code=0 id=31511 mark=0 use=1
629udp 17 6 src=68.199.193.42 dst=8.254.13.2 sport=32586 dport=53 src=8.254.13.2 dst=68.199.193.42 sport=53 dport=32586 mark=0 use=1
630udp 17 7 src=59.18.54.67 dst=68.199.193.44 sport=38351 dport=53 src=68.199.193.44 dst=59.18.54.67 sport=53 dport=38351 mark=0 use=1
631tcp 6 82 TIME_WAIT src=68.199.193.42 dst=66.104.218.100 sport=44462 dport=443 src=66.104.218.100 dst=68.199.193.42 sport=443 dport=44462 [ASSURED] mark=0 use=1
632tcp 6 78 TIME_WAIT src=68.199.193.42 dst=66.104.218.100 sport=44426 dport=443 src=66.104.218.100 dst=68.199.193.42 sport=443 dport=44426 [ASSURED] mark=0 use=1
633udp 17 29 src=172.217.47.7 dst=68.199.193.44 sport=63761 dport=53 src=68.199.193.44 dst=172.217.47.7 sport=53 dport=63761 mark=0 use=1
634tcp 6 69 TIME_WAIT src=68.199.193.42 dst=66.104.218.100 sport=44320 dport=443 src=66.104.218.100 dst=68.199.193.42 sport=443 dport=44320 [ASSURED] mark=0 use=1
635tcp 6 88 TIME_WAIT src=68.199.193.42 dst=68.199.193.45 sport=35732 dport=25 src=68.199.193.45 dst=68.199.193.42 sport=25 dport=35732 [ASSURED] mark=0 use=1
636tcp 6 85 TIME_WAIT src=68.199.193.42 dst=64.1.16.5 sport=59674 dport=25 src=64.1.16.5 dst=68.199.193.42 sport=25 dport=59674 [ASSURED] mark=0 use=2
637udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=54854 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=54854 [ASSURED] mark=0 use=1
638udp 17 6 src=68.199.193.42 dst=8.254.13.2 sport=54791 dport=53 src=8.254.13.2 dst=68.199.193.42 sport=53 dport=54791 mark=0 use=1
639udp 17 2 src=192.168.1.7 dst=192.168.1.1 sport=60328 dport=53 src=192.168.1.1 dst=192.168.1.7 sport=53 dport=60328 mark=0 use=1
640tcp 6 431880 ESTABLISHED src=192.168.1.7 dst=64.1.16.23 sport=59886 dport=993 src=64.1.16.23 dst=68.199.193.42 sport=993 dport=59886 [ASSURED] mark=0 use=1
641tcp 6 72 TIME_WAIT src=68.199.193.42 dst=66.104.218.100 sport=44346 dport=443 src=66.104.218.100 dst=68.199.193.42 sport=443 dport=44346 [ASSURED] mark=0 use=1
642tcp 6 79 TIME_WAIT src=68.199.193.42 dst=64.1.16.18 sport=38594 dport=443 src=64.1.16.18 dst=68.199.193.42 sport=443 dport=38594 [ASSURED] mark=0 use=1
643tcp 6 431987 ESTABLISHED src=68.199.193.42 dst=64.1.16.27 sport=54546 dport=4949 src=64.1.16.27 dst=68.199.193.42 sport=4949 dport=54546 [ASSURED] mark=0 use=1
644tcp 6 431704 ESTABLISHED src=192.168.1.7 dst=173.194.175.16 sport=46120 dport=993 src=173.194.175.16 dst=68.199.193.42 sport=993 dport=46120 [ASSURED] mark=0 use=1
645udp 17 8 src=74.220.198.177 dst=68.199.193.44 sport=53271 dport=53 src=68.199.193.44 dst=74.220.198.177 sport=53 dport=53271 mark=0 use=1
646tcp 6 87 TIME_WAIT src=68.199.193.42 dst=64.1.16.5 sport=59688 dport=25 src=64.1.16.5 dst=68.199.193.42 sport=25 dport=59688 [ASSURED] mark=0 use=1
647udp 17 8 src=3.91.6.43 dst=68.199.193.44 sport=49476 dport=53 src=68.199.193.44 dst=3.91.6.43 sport=53 dport=49476 mark=0 use=1
648tcp 6 79 TIME_WAIT src=68.199.193.42 dst=64.1.16.27 sport=58908 dport=25 src=64.1.16.27 dst=68.199.193.42 sport=25 dport=58908 [ASSURED] mark=0 use=1
649udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=46076 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=46076 [ASSURED] mark=0 use=1
650tcp 6 28 TIME_WAIT src=192.168.1.23 dst=23.246.7.183 sport=33415 dport=80 src=23.246.7.183 dst=68.199.193.42 sport=80 dport=33415 [ASSURED] mark=0 use=1
651udp 17 165 src=192.168.1.23 dst=192.168.1.1 sport=52814 dport=53 src=192.168.1.1 dst=192.168.1.23 sport=53 dport=52814 [ASSURED] mark=0 use=1
652tcp 6 431973 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=40738 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=40738 [ASSURED] mark=0 use=1
653tcp 6 83 TIME_WAIT src=68.199.193.42 dst=64.1.16.3 sport=56244 dport=25 src=64.1.16.3 dst=68.199.193.42 sport=25 dport=56244 [ASSURED] mark=0 use=1
654udp 17 12 src=192.168.1.1 dst=192.168.1.1 sport=38815 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=38815 mark=0 use=1
655tcp 6 115 TIME_WAIT src=68.199.193.42 dst=184.154.50.20 sport=48308 dport=80 src=184.154.50.20 dst=68.199.193.42 sport=80 dport=48308 [ASSURED] mark=0 use=1
656udp 17 0 src=67.215.84.21 dst=68.199.193.44 sport=25256 dport=53 src=68.199.193.44 dst=67.215.84.21 sport=53 dport=25256 mark=0 use=1
657tcp 6 74 TIME_WAIT src=68.199.193.42 dst=66.104.218.100 sport=44370 dport=443 src=66.104.218.100 dst=68.199.193.42 sport=443 dport=44370 [ASSURED] mark=0 use=1
658udp 17 19 src=8.31.233.41 dst=68.199.193.44 sport=35647 dport=53 src=68.199.193.44 dst=8.31.233.41 sport=53 dport=35647 mark=0 use=1
659tcp 6 81 TIME_WAIT src=68.199.193.42 dst=64.1.16.5 sport=59644 dport=25 src=64.1.16.5 dst=68.199.193.42 sport=25 dport=59644 [ASSURED] mark=0 use=1
660tcp 6 73 TIME_WAIT src=68.199.193.42 dst=64.1.16.5 sport=59548 dport=25 src=64.1.16.5 dst=68.199.193.42 sport=25 dport=59548 [ASSURED] mark=0 use=1
661tcp 6 58 TIME_WAIT src=192.168.1.23 dst=23.246.7.192 sport=57476 dport=80 src=23.246.7.192 dst=68.199.193.42 sport=80 dport=57476 [ASSURED] mark=0 use=1
662tcp 6 431972 ESTABLISHED src=192.168.1.23 dst=23.246.7.183 sport=33420 dport=80 src=23.246.7.183 dst=68.199.193.42 sport=80 dport=33420 [ASSURED] mark=0 use=1
663tcp 6 431977 ESTABLISHED src=192.168.1.7 dst=172.217.197.189 sport=41758 dport=443 src=172.217.197.189 dst=68.199.193.42 sport=443 dport=41758 [ASSURED] mark=0 use=1
664tcp 6 28 TIME_WAIT src=192.168.1.23 dst=23.246.7.183 sport=33413 dport=80 src=23.246.7.183 dst=68.199.193.42 sport=80 dport=33413 [ASSURED] mark=0 use=1
665udp 17 8 src=108.162.217.86 dst=68.199.193.44 sport=28312 dport=53 src=68.199.193.44 dst=108.162.217.86 sport=53 dport=28312 mark=0 use=1
666tcp 6 431960 ESTABLISHED src=192.168.1.7 dst=209.185.166.10 sport=49342 dport=443 src=209.185.166.10 dst=68.199.193.42 sport=443 dport=49342 [ASSURED] mark=0 use=1
667udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=44836 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=44836 [ASSURED] mark=0 use=1
668tcp 6 431960 ESTABLISHED src=192.168.1.7 dst=209.185.166.10 sport=49372 dport=443 src=209.185.166.10 dst=68.199.193.42 sport=443 dport=49372 [ASSURED] mark=0 use=1
669udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=47853 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=47853 [ASSURED] mark=0 use=1
670tcp 6 431973 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=40040 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=40040 [ASSURED] mark=0 use=1
671tcp 6 84 TIME_WAIT src=68.199.193.42 dst=68.199.193.45 sport=35702 dport=25 src=68.199.193.45 dst=68.199.193.42 sport=25 dport=35702 [ASSURED] mark=0 use=1
672tcp 6 431973 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=45776 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=45776 [ASSURED] mark=0 use=1
673tcp 6 430860 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=45814 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=45814 [ASSURED] mark=0 use=1
674tcp 6 71 TIME_WAIT src=68.199.193.42 dst=64.1.16.27 sport=58812 dport=25 src=64.1.16.27 dst=68.199.193.42 sport=25 dport=58812 [ASSURED] mark=0 use=1
675tcp 6 431960 ESTABLISHED src=192.168.1.7 dst=35.186.193.174 sport=46268 dport=443 src=35.186.193.174 dst=68.199.193.42 sport=443 dport=46268 [ASSURED] mark=0 use=1
676tcp 6 116 TIME_WAIT src=68.199.193.42 dst=68.199.193.42 sport=40422 dport=4949 src=68.199.193.42 dst=68.199.193.42 sport=4949 dport=40422 [ASSURED] mark=0 use=1
677udp 17 24 src=68.199.193.42 dst=216.239.32.10 sport=54863 dport=53 src=216.239.32.10 dst=68.199.193.42 sport=53 dport=54863 mark=0 use=2
678udp 17 6 src=68.199.193.42 dst=8.254.13.2 sport=44069 dport=53 src=8.254.13.2 dst=68.199.193.42 sport=53 dport=44069 mark=0 use=1
679tcp 6 116 TIME_WAIT src=68.199.193.42 dst=64.1.16.20 sport=33826 dport=4949 src=64.1.16.20 dst=68.199.193.42 sport=4949 dport=33826 [ASSURED] mark=0 use=1
680tcp 6 75 TIME_WAIT src=192.168.1.7 dst=136.147.101.130 sport=36928 dport=443 src=136.147.101.130 dst=68.199.193.42 sport=443 dport=36928 [ASSURED] mark=0 use=1
681tcp 6 78 TIME_WAIT src=68.199.193.42 dst=64.1.16.3 sport=56186 dport=25 src=64.1.16.3 dst=68.199.193.42 sport=25 dport=56186 [ASSURED] mark=0 use=1
682icmp 1 19 src=129.82.138.44 dst=68.199.193.46 type=8 code=0 id=26986 src=68.199.193.46 dst=129.82.138.44 type=0 code=0 id=26986 mark=0 use=1
683tcp 6 431994 ESTABLISHED src=192.168.1.7 dst=74.117.206.68 sport=33332 dport=443 src=74.117.206.68 dst=68.199.193.42 sport=443 dport=33332 [ASSURED] mark=0 use=1
684tcp 6 431940 ESTABLISHED src=192.168.1.23 dst=23.246.7.176 sport=57839 dport=80 src=23.246.7.176 dst=68.199.193.42 sport=80 dport=57839 [ASSURED] mark=0 use=1
685udp 17 5 src=23.103.131.75 dst=68.199.193.44 sport=59717 dport=53 src=68.199.193.44 dst=23.103.131.75 sport=53 dport=59717 mark=0 use=1
686tcp 6 64 TIME_WAIT src=192.168.1.114 dst=13.33.80.181 sport=49074 dport=80 src=13.33.80.181 dst=68.199.193.42 sport=80 dport=49074 [ASSURED] mark=0 use=1
687udp 17 122 src=192.168.1.1 dst=192.168.1.1 sport=35063 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=35063 [ASSURED] mark=0 use=1
688tcp 6 431992 ESTABLISHED src=192.168.1.7 dst=172.217.10.46 sport=46286 dport=443 src=172.217.10.46 dst=68.199.193.42 sport=443 dport=46286 [ASSURED] mark=0 use=1
689tcp 6 71 TIME_WAIT src=68.199.193.42 dst=66.104.218.100 sport=44334 dport=443 src=66.104.218.100 dst=68.199.193.42 sport=443 dport=44334 [ASSURED] mark=0 use=1
690tcp 6 431880 ESTABLISHED src=192.168.1.7 dst=64.1.16.23 sport=59876 dport=993 src=64.1.16.23 dst=68.199.193.42 sport=993 dport=59876 [ASSURED] mark=0 use=1
691tcp 6 294543 ESTABLISHED src=192.168.1.35 dst=52.173.28.179 sport=61046 dport=443 src=52.173.28.179 dst=68.199.193.42 sport=443 dport=61046 [ASSURED] mark=0 use=1
692tcp 6 431984 ESTABLISHED src=192.168.1.7 dst=172.217.6.226 sport=42138 dport=443 src=172.217.6.226 dst=68.199.193.42 sport=443 dport=42138 [ASSURED] mark=0 use=1
693tcp 6 431973 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=45812 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=45812 [ASSURED] mark=0 use=1
694udp 17 129 src=192.168.1.1 dst=192.168.1.1 sport=54205 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=54205 [ASSURED] mark=0 use=1
695udp 17 39 src=37.49.231.15 dst=68.199.193.46 sport=5325 dport=5060 [UNREPLIED] src=68.199.193.46 dst=37.49.231.15 sport=5060 dport=5325 mark=0 helper=sip use=1
696tcp 6 431993 ESTABLISHED src=192.168.1.113 dst=72.21.207.143 sport=40686 dport=443 src=72.21.207.143 dst=68.199.193.42 sport=443 dport=40686 [ASSURED] mark=0 use=1
697tcp 6 431939 ESTABLISHED src=192.168.1.7 dst=192.168.1.100 sport=55370 dport=445 src=192.168.1.100 dst=192.168.1.7 sport=445 dport=55370 [ASSURED] mark=0 use=1
698tcp 6 81 TIME_WAIT src=68.199.193.42 dst=66.104.218.100 sport=44450 dport=443 src=66.104.218.100 dst=68.199.193.42 sport=443 dport=44450 [ASSURED] mark=0 use=1
699udp 17 6 src=68.199.193.42 dst=8.254.13.2 sport=45880 dport=53 src=8.254.13.2 dst=68.199.193.42 sport=53 dport=45880 mark=0 use=1
700tcp 6 247232 ESTABLISHED src=192.168.1.35 dst=52.165.170.112 sport=55458 dport=443 src=52.165.170.112 dst=68.199.193.42 sport=443 dport=55458 [ASSURED] mark=0 use=1
701tcp 6 299 ESTABLISHED src=192.168.1.35 dst=31.13.71.1 sport=59498 dport=443 src=31.13.71.1 dst=68.199.193.42 sport=443 dport=59498 [ASSURED] mark=0 use=1
702udp 17 170 src=192.168.1.7 dst=52.202.34.20 sport=44570 dport=3478 src=52.202.34.20 dst=68.199.193.42 sport=3478 dport=44570 [ASSURED] mark=0 use=1
703tcp 6 431996 ESTABLISHED src=192.168.1.7 dst=172.217.12.133 sport=50926 dport=443 src=172.217.12.133 dst=68.199.193.42 sport=443 dport=50926 [ASSURED] mark=0 use=1
704icmp 1 22 src=192.168.1.1 dst=192.168.1.119 type=8 code=0 id=26972 [UNREPLIED] src=192.168.1.119 dst=192.168.1.1 type=0 code=0 id=26972 mark=0 use=1
705udp 17 162 src=192.168.1.114 dst=23.23.189.18 sport=51405 dport=33434 src=23.23.189.18 dst=68.199.193.42 sport=33434 dport=51405 [ASSURED] mark=0 use=1
706udp 17 12 src=192.168.1.1 dst=192.168.1.1 sport=59710 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=59710 mark=0 use=1
707udp 17 23 src=70.33.210.227 dst=68.199.193.44 sport=5911 dport=53 src=68.199.193.44 dst=70.33.210.227 sport=53 dport=5911 mark=0 use=1
708udp 17 177 src=192.168.1.1 dst=192.168.1.106 sport=5060 dport=5060 src=192.168.1.106 dst=192.168.1.1 sport=5060 dport=5060 [ASSURED] mark=0 use=1
709tcp 6 44 TIME_WAIT src=192.168.1.7 dst=172.217.10.227 sport=34926 dport=443 src=172.217.10.227 dst=68.199.193.42 sport=443 dport=34926 [ASSURED] mark=0 use=1
710tcp 6 431998 ESTABLISHED src=192.168.1.7 dst=104.244.42.193 sport=43586 dport=443 src=104.244.42.193 dst=68.199.193.42 sport=443 dport=43586 [ASSURED] mark=0 use=1
711udp 17 7 src=81.211.13.146 dst=68.199.193.44 sport=60490 dport=53 src=68.199.193.44 dst=81.211.13.146 sport=53 dport=60490 mark=0 use=1
712udp 17 25 src=202.19.222.23 dst=68.199.193.44 sport=55957 dport=53 src=68.199.193.44 dst=202.19.222.23 sport=53 dport=55957 mark=0 use=1
713tcp 6 431880 ESTABLISHED src=192.168.1.7 dst=64.1.16.23 sport=59872 dport=993 src=64.1.16.23 dst=68.199.193.42 sport=993 dport=59872 [ASSURED] mark=0 use=1
714udp 17 25 src=173.194.171.2 dst=68.199.193.44 sport=60896 dport=53 src=68.199.193.44 dst=173.194.171.2 sport=53 dport=60896 mark=0 use=1
715tcp 6 431980 ESTABLISHED src=192.168.1.7 dst=173.194.175.188 sport=38932 dport=5228 src=173.194.175.188 dst=68.199.193.42 sport=5228 dport=38932 [ASSURED] mark=0 use=1
716udp 17 6 src=192.168.1.7 dst=192.168.1.1 sport=59689 dport=53 src=192.168.1.1 dst=192.168.1.7 sport=53 dport=59689 mark=0 use=1
717udp 17 175 src=192.168.1.120 dst=192.168.1.1 sport=4096 dport=53 src=192.168.1.1 dst=192.168.1.120 sport=53 dport=4096 [ASSURED] mark=0 use=1
718tcp 6 77 TIME_WAIT src=68.199.193.42 dst=64.1.16.3 sport=56178 dport=25 src=64.1.16.3 dst=68.199.193.42 sport=25 dport=56178 [ASSURED] mark=0 use=1
719tcp 6 83 TIME_WAIT src=68.199.193.42 dst=68.199.193.45 sport=35694 dport=25 src=68.199.193.45 dst=68.199.193.42 sport=25 dport=35694 [ASSURED] mark=0 use=2
720tcp 6 431973 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=40036 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=40036 [ASSURED] mark=0 use=1
721tcp 6 431880 ESTABLISHED src=192.168.1.7 dst=64.1.16.23 sport=59882 dport=993 src=64.1.16.23 dst=68.199.193.42 sport=993 dport=59882 [ASSURED] mark=0 use=1
722udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=60438 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=60438 [ASSURED] mark=0 use=1
723tcp 6 431956 ESTABLISHED src=192.168.1.7 dst=199.16.156.41 sport=50500 dport=443 src=199.16.156.41 dst=68.199.193.42 sport=443 dport=50500 [ASSURED] mark=0 use=1
724tcp 6 431997 ESTABLISHED src=192.168.1.7 dst=31.13.71.1 sport=60584 dport=443 src=31.13.71.1 dst=68.199.193.42 sport=443 dport=60584 [ASSURED] mark=0 use=1
725tcp 6 111 TIME_WAIT src=68.199.193.42 dst=184.154.50.20 sport=48296 dport=80 src=184.154.50.20 dst=68.199.193.42 sport=80 dport=48296 [ASSURED] mark=0 use=1
726udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=58564 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=58564 [ASSURED] mark=0 use=1
727tcp 6 431959 ESTABLISHED src=192.168.1.7 dst=198.252.206.25 sport=42110 dport=443 src=198.252.206.25 dst=68.199.193.42 sport=443 dport=42110 [ASSURED] mark=0 use=1
728udp 17 7 src=59.18.54.67 dst=68.199.193.44 sport=47615 dport=53 src=68.199.193.44 dst=59.18.54.67 sport=53 dport=47615 mark=0 use=1
729tcp 6 431984 ESTABLISHED src=192.168.1.7 dst=54.239.31.63 sport=48676 dport=443 src=54.239.31.63 dst=68.199.193.42 sport=443 dport=48676 [ASSURED] mark=0 use=1
730udp 17 12 src=192.168.1.1 dst=192.168.1.1 sport=54212 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=54212 mark=0 use=1
731tcp 6 66 TIME_WAIT src=192.168.1.7 dst=172.217.12.133 sport=47294 dport=443 src=172.217.12.133 dst=68.199.193.42 sport=443 dport=47294 [ASSURED] mark=0 use=1
732tcp 6 431956 ESTABLISHED src=192.168.1.7 dst=209.185.166.10 sport=49340 dport=443 src=209.185.166.10 dst=68.199.193.42 sport=443 dport=49340 [ASSURED] mark=0 use=1
733tcp 6 75 TIME_WAIT src=68.199.193.42 dst=64.1.16.18 sport=38544 dport=443 src=64.1.16.18 dst=68.199.193.42 sport=443 dport=38544 [ASSURED] mark=0 use=1
734tcp 6 431886 ESTABLISHED src=192.168.1.35 dst=68.199.193.42 sport=49944 dport=993 src=68.199.193.42 dst=192.168.1.35 sport=993 dport=49944 [ASSURED] mark=0 use=1
735tcp 6 79 TIME_WAIT src=68.199.193.42 dst=64.1.16.5 sport=59620 dport=25 src=64.1.16.5 dst=68.199.193.42 sport=25 dport=59620 [ASSURED] mark=0 use=1
736tcp 6 430811 ESTABLISHED src=192.168.1.7 dst=173.194.207.109 sport=35274 dport=993 src=173.194.207.109 dst=68.199.193.42 sport=993 dport=35274 [ASSURED] mark=0 use=1
737tcp 6 431992 ESTABLISHED src=192.168.1.7 dst=172.217.12.174 sport=57544 dport=443 src=172.217.12.174 dst=68.199.193.42 sport=443 dport=57544 [ASSURED] mark=0 use=1
738tcp 6 75 TIME_WAIT src=68.199.193.42 dst=68.199.193.45 sport=35608 dport=25 src=68.199.193.45 dst=68.199.193.42 sport=25 dport=35608 [ASSURED] mark=0 use=1
739udp 17 14 src=104.44.223.9 dst=68.199.193.44 sport=63334 dport=53 src=68.199.193.44 dst=104.44.223.9 sport=53 dport=63334 mark=0 use=1
740tcp 6 42 TIME_WAIT src=192.168.1.1 dst=192.168.1.100 sport=57430 dport=80 src=192.168.1.100 dst=192.168.1.1 sport=80 dport=57430 [ASSURED] mark=0 use=1
741tcp 6 376109 ESTABLISHED src=192.168.1.7 dst=34.196.28.148 sport=57318 dport=443 src=34.196.28.148 dst=68.199.193.42 sport=443 dport=57318 [ASSURED] mark=0 use=1
742tcp 6 105 SYN_SENT src=78.128.112.138 dst=68.199.193.46 sport=8080 dport=7008 [UNREPLIED] src=68.199.193.46 dst=78.128.112.138 sport=7008 dport=8080 mark=0 use=1
743tcp 6 76 TIME_WAIT src=68.199.193.42 dst=64.1.16.3 sport=56162 dport=25 src=64.1.16.3 dst=68.199.193.42 sport=25 dport=56162 [ASSURED] mark=0 use=1
744udp 17 122 src=192.168.1.1 dst=192.168.1.1 sport=49188 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=49188 [ASSURED] mark=0 use=1
745udp 17 14 src=68.199.193.42 dst=45.57.9.1 sport=16002 dport=53 src=45.57.9.1 dst=68.199.193.42 sport=53 dport=16002 mark=0 use=1
746tcp 6 78 TIME_WAIT src=68.199.193.42 dst=68.199.193.45 sport=35634 dport=25 src=68.199.193.45 dst=68.199.193.42 sport=25 dport=35634 [ASSURED] mark=0 use=1
747tcp 6 327152 ESTABLISHED src=192.168.1.119 dst=209.85.144.188 sport=38164 dport=5228 src=209.85.144.188 dst=68.199.193.42 sport=5228 dport=38164 [ASSURED] mark=0 use=1
748tcp 6 431954 ESTABLISHED src=192.168.1.7 dst=172.217.10.67 sport=37312 dport=443 src=172.217.10.67 dst=68.199.193.42 sport=443 dport=37312 [ASSURED] mark=0 use=1
749tcp 6 80 TIME_WAIT src=68.199.193.42 dst=68.199.193.45 sport=35660 dport=25 src=68.199.193.45 dst=68.199.193.42 sport=25 dport=35660 [ASSURED] mark=0 use=1
750udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=53460 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=53460 [ASSURED] mark=0 use=1
751tcp 6 431982 ESTABLISHED src=192.168.1.35 dst=13.59.106.253 sport=65530 dport=443 src=13.59.106.253 dst=68.199.193.42 sport=443 dport=65530 [ASSURED] mark=0 use=1
752tcp 6 431118 ESTABLISHED src=192.168.1.23 dst=54.239.27.11 sport=39512 dport=443 src=54.239.27.11 dst=68.199.193.42 sport=443 dport=39512 [ASSURED] mark=0 use=1
753tcp 6 82 TIME_WAIT src=68.199.193.42 dst=64.1.16.27 sport=58944 dport=25 src=64.1.16.27 dst=68.199.193.42 sport=25 dport=58944 [ASSURED] mark=0 use=1
754tcp 6 431880 ESTABLISHED src=192.168.1.7 dst=64.1.16.23 sport=54102 dport=993 src=64.1.16.23 dst=68.199.193.42 sport=993 dport=54102 [ASSURED] mark=0 use=1
755tcp 6 86 TIME_WAIT src=68.199.193.42 dst=64.1.16.3 sport=56260 dport=25 src=64.1.16.3 dst=68.199.193.42 sport=25 dport=56260 [ASSURED] mark=0 use=1
756udp 17 1807 src=178.211.51.213 dst=68.199.193.46 sport=5129 dport=5060 [UNREPLIED] src=68.199.193.46 dst=178.211.51.213 sport=5060 dport=5129 mark=0 helper=sip use=1
757udp 17 6 src=68.199.193.42 dst=8.254.13.2 sport=59559 dport=53 src=8.254.13.2 dst=68.199.193.42 sport=53 dport=59559 mark=0 use=1
758tcp 6 431998 ESTABLISHED src=192.168.1.7 dst=104.107.30.123 sport=39796 dport=443 src=104.107.30.123 dst=68.199.193.42 sport=443 dport=39796 [ASSURED] mark=0 use=1
759tcp 6 431895 ESTABLISHED src=192.168.1.35 dst=68.199.193.42 sport=65252 dport=993 src=68.199.193.42 dst=192.168.1.35 sport=993 dport=65252 [ASSURED] mark=0 use=2
760tcp 6 112 TIME_WAIT src=68.199.193.42 dst=184.154.50.20 sport=48302 dport=80 src=184.154.50.20 dst=68.199.193.42 sport=80 dport=48302 [ASSURED] mark=0 use=1
761udp 17 25 src=202.19.222.23 dst=68.199.193.44 sport=60797 dport=53 src=68.199.193.44 dst=202.19.222.23 sport=53 dport=60797 mark=0 use=1
762udp 17 24 src=192.168.1.119 dst=192.168.1.1 sport=59408 dport=53 src=192.168.1.1 dst=192.168.1.119 sport=53 dport=59408 mark=0 use=1
763tcp 6 431900 ESTABLISHED src=192.168.1.112 dst=52.55.84.74 sport=53351 dport=9543 src=52.55.84.74 dst=68.199.193.42 sport=9543 dport=53351 [ASSURED] mark=0 use=1
764tcp 6 431993 ESTABLISHED src=192.168.1.7 dst=66.104.218.100 sport=45564 dport=143 src=66.104.218.100 dst=68.199.193.42 sport=143 dport=45564 [ASSURED] mark=0 use=1
765udp 17 6 src=68.199.193.42 dst=8.254.13.2 sport=38275 dport=53 src=8.254.13.2 dst=68.199.193.42 sport=53 dport=38275 mark=0 use=1
766tcp 6 431997 ESTABLISHED src=192.168.1.35 dst=184.25.176.117 sport=58817 dport=443 src=184.25.176.117 dst=68.199.193.42 sport=443 dport=58817 [ASSURED] mark=0 use=1
767tcp 6 431975 ESTABLISHED src=192.168.1.7 dst=104.107.30.123 sport=41380 dport=443 src=104.107.30.123 dst=68.199.193.42 sport=443 dport=41380 [ASSURED] mark=0 use=1
768tcp 6 431974 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=45624 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=45624 [ASSURED] mark=0 use=1
769tcp 6 431722 ESTABLISHED src=192.168.1.7 dst=209.85.201.109 sport=59254 dport=993 src=209.85.201.109 dst=68.199.193.42 sport=993 dport=59254 [ASSURED] mark=0 use=1
770tcp 6 431988 ESTABLISHED src=192.168.1.7 dst=52.200.5.225 sport=53296 dport=80 src=52.200.5.225 dst=68.199.193.42 sport=80 dport=53296 [ASSURED] mark=0 use=1
771tcp 6 74 TIME_WAIT src=68.199.193.42 dst=68.199.193.45 sport=35596 dport=25 src=68.199.193.45 dst=68.199.193.42 sport=25 dport=35596 [ASSURED] mark=0 use=1
772tcp 6 59 TIME_WAIT src=192.168.1.7 dst=172.217.3.103 sport=42376 dport=443 src=172.217.3.103 dst=68.199.193.42 sport=443 dport=42376 [ASSURED] mark=0 use=1
773tcp 6 58 TIME_WAIT src=192.168.1.23 dst=23.246.7.192 sport=57478 dport=80 src=23.246.7.192 dst=68.199.193.42 sport=80 dport=57478 [ASSURED] mark=0 use=1
774tcp 6 64 TIME_WAIT src=68.199.193.42 dst=66.104.218.100 sport=44292 dport=443 src=66.104.218.100 dst=68.199.193.42 sport=443 dport=44292 [ASSURED] mark=0 use=1
775tcp 6 208390 ESTABLISHED src=192.168.1.18 dst=52.173.24.17 sport=50416 dport=443 src=52.173.24.17 dst=68.199.193.42 sport=443 dport=50416 [ASSURED] mark=0 use=1
776udp 17 42 src=192.168.1.1 dst=192.168.1.1 sport=43284 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=43284 [ASSURED] mark=0 use=1
777tcp 6 431993 ESTABLISHED src=192.168.1.7 dst=64.1.16.5 sport=40874 dport=993 src=64.1.16.5 dst=68.199.193.42 sport=993 dport=40874 [ASSURED] mark=0 use=1
778tcp 6 8 CLOSE src=192.168.1.7 dst=18.214.91.159 sport=39912 dport=443 src=18.214.91.159 dst=68.199.193.42 sport=443 dport=39912 [ASSURED] mark=0 use=1
779tcp 6 76 TIME_WAIT src=68.199.193.42 dst=64.1.16.18 sport=38556 dport=443 src=64.1.16.18 dst=68.199.193.42 sport=443 dport=38556 [ASSURED] mark=0 use=1
780udp 17 24 src=68.199.193.42 dst=216.239.32.10 sport=43955 dport=53 src=216.239.32.10 dst=68.199.193.42 sport=53 dport=43955 mark=0 use=1
781tcp 6 82 TIME_WAIT src=68.199.193.42 dst=64.1.16.5 sport=59656 dport=25 src=64.1.16.5 dst=68.199.193.42 sport=25 dport=59656 [ASSURED] mark=0 use=1
782tcp 6 431996 ESTABLISHED src=192.168.1.7 dst=31.13.71.1 sport=57542 dport=443 src=31.13.71.1 dst=68.199.193.42 sport=443 dport=57542 [ASSURED] mark=0 use=1
783udp 17 25 src=202.19.222.23 dst=68.199.193.44 sport=43093 dport=53 src=68.199.193.44 dst=202.19.222.23 sport=53 dport=43093 mark=0 use=1
784tcp 6 113 TIME_WAIT src=68.199.193.42 dst=66.104.218.100 sport=53742 dport=4949 src=66.104.218.100 dst=68.199.193.42 sport=4949 dport=53742 [ASSURED] mark=0 use=1
785tcp 6 299 ESTABLISHED src=192.168.1.35 dst=23.50.53.219 sport=59694 dport=443 src=23.50.53.219 dst=68.199.193.42 sport=443 dport=59694 [ASSURED] mark=0 use=1
786tcp 6 70 TIME_WAIT src=127.0.0.1 dst=127.0.0.1 sport=42000 dport=8891 src=127.0.0.1 dst=127.0.0.1 sport=8891 dport=42000 [ASSURED] mark=0 use=1
787tcp 6 431175 ESTABLISHED src=192.168.1.7 dst=192.168.1.1 sport=43470 dport=22 src=192.168.1.1 dst=192.168.1.7 sport=22 dport=43470 [ASSURED] mark=0 use=1
788udp 17 22 src=50.56.236.225 dst=68.199.193.44 sport=47294 dport=53 src=68.199.193.44 dst=50.56.236.225 sport=53 dport=47294 mark=0 use=1
789tcp 6 111 TIME_WAIT src=68.199.193.42 dst=64.1.16.3 sport=49326 dport=4949 src=64.1.16.3 dst=68.199.193.42 sport=4949 dport=49326 [ASSURED] mark=0 use=1
790udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=45553 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=45553 [ASSURED] mark=0 use=1
791tcp 6 431972 ESTABLISHED src=192.168.1.23 dst=23.246.7.183 sport=33421 dport=80 src=23.246.7.183 dst=68.199.193.42 sport=80 dport=33421 [ASSURED] mark=0 use=1
792tcp 6 65 TIME_WAIT src=185.211.245.170 dst=68.199.193.44 sport=1312 dport=587 src=68.199.193.44 dst=185.211.245.170 sport=587 dport=1312 [ASSURED] mark=0 use=1
793udp 17 137 src=192.168.1.116 dst=192.168.1.1 sport=5060 dport=5060 src=192.168.1.1 dst=192.168.1.116 sport=5060 dport=5060 [ASSURED] mark=0 use=1
794tcp 6 431991 ESTABLISHED src=192.168.1.7 dst=31.13.71.1 sport=33106 dport=443 src=31.13.71.1 dst=68.199.193.42 sport=443 dport=33106 [ASSURED] mark=0 use=1
795tcp 6 247337 ESTABLISHED src=192.168.1.35 dst=172.217.197.188 sport=55618 dport=5228 src=172.217.197.188 dst=68.199.193.42 sport=5228 dport=55618 [ASSURED] mark=0 use=1
796udp 17 113 src=192.168.1.7 dst=192.168.1.1 sport=60359 dport=53 src=192.168.1.1 dst=192.168.1.7 sport=53 dport=60359 [ASSURED] mark=0 use=1
797udp 17 7 src=59.18.54.67 dst=68.199.193.44 sport=59741 dport=53 src=68.199.193.44 dst=59.18.54.67 sport=53 dport=59741 mark=0 use=1
798tcp 6 47 SYN_SENT src=176.119.4.77 dst=68.199.193.46 sport=52928 dport=9071 [UNREPLIED] src=68.199.193.46 dst=176.119.4.77 sport=9071 dport=52928 mark=0 use=1
799tcp 6 81 TIME_WAIT src=68.199.193.42 dst=68.199.193.45 sport=35672 dport=25 src=68.199.193.45 dst=68.199.193.42 sport=25 dport=35672 [ASSURED] mark=0 use=1
800tcp 6 24 TIME_WAIT src=192.168.1.7 dst=136.147.100.130 sport=45754 dport=443 src=136.147.100.130 dst=68.199.193.42 sport=443 dport=45754 [ASSURED] mark=0 use=2
801tcp 6 1 CLOSE src=192.168.1.35 dst=172.82.212.122 sport=49314 dport=443 src=172.82.212.122 dst=68.199.193.42 sport=443 dport=49314 [ASSURED] mark=0 use=1
802tcp 6 431974 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=40038 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=40038 [ASSURED] mark=0 use=1
803tcp 6 53 TIME_WAIT src=192.168.1.7 dst=184.86.75.248 sport=42040 dport=443 src=184.86.75.248 dst=68.199.193.42 sport=443 dport=42040 [ASSURED] mark=0 use=1
804udp 17 22 src=8.0.16.136 dst=68.199.193.44 sport=36997 dport=53 src=68.199.193.44 dst=8.0.16.136 sport=53 dport=36997 mark=0 use=1
805tcp 6 69 TIME_WAIT src=68.199.193.42 dst=64.1.16.27 sport=58788 dport=25 src=64.1.16.27 dst=68.199.193.42 sport=25 dport=58788 [ASSURED] mark=0 use=1
806tcp 6 431992 ESTABLISHED src=192.168.1.35 dst=199.127.194.93 sport=59684 dport=443 src=199.127.194.93 dst=68.199.193.42 sport=443 dport=59684 [ASSURED] mark=0 use=1
807udp 17 15 src=68.199.193.42 dst=205.251.197.209 sport=36628 dport=53 src=205.251.197.209 dst=68.199.193.42 sport=53 dport=36628 mark=0 use=1
808tcp 6 431996 ESTABLISHED src=192.168.1.7 dst=172.217.197.154 sport=39800 dport=443 src=172.217.197.154 dst=68.199.193.42 sport=443 dport=39800 [ASSURED] mark=0 use=1
809tcp 6 76 TIME_WAIT src=68.199.193.42 dst=64.1.16.27 sport=58872 dport=25 src=64.1.16.27 dst=68.199.193.42 sport=25 dport=58872 [ASSURED] mark=0 use=1
810tcp 6 431962 ESTABLISHED src=192.168.1.7 dst=172.217.9.238 sport=44008 dport=443 src=172.217.9.238 dst=68.199.193.42 sport=443 dport=44008 [ASSURED] mark=0 use=1
811tcp 6 8 SYN_SENT src=5.188.206.14 dst=68.199.193.46 sport=46565 dport=3121 [UNREPLIED] src=68.199.193.46 dst=5.188.206.14 sport=3121 dport=46565 mark=0 use=1
812tcp 6 80 TIME_WAIT src=68.199.193.42 dst=64.1.16.5 sport=59632 dport=25 src=64.1.16.5 dst=68.199.193.42 sport=25 dport=59632 [ASSURED] mark=0 use=1
813tcp 6 94 TIME_WAIT src=192.168.1.7 dst=192.168.1.100 sport=40590 dport=80 src=192.168.1.100 dst=192.168.1.7 sport=80 dport=40590 [ASSURED] mark=0 use=1
814tcp 6 64 TIME_WAIT src=68.199.193.42 dst=64.1.16.18 sport=38454 dport=443 src=64.1.16.18 dst=68.199.193.42 sport=443 dport=38454 [ASSURED] mark=0 use=1
815tcp 6 113 TIME_WAIT src=68.199.193.42 dst=184.154.50.20 sport=48304 dport=80 src=184.154.50.20 dst=68.199.193.42 sport=80 dport=48304 [ASSURED] mark=0 use=1
816udp 17 6 src=68.199.193.42 dst=8.254.13.2 sport=47556 dport=53 src=8.254.13.2 dst=68.199.193.42 sport=53 dport=47556 mark=0 use=1
817tcp 6 17 TIME_WAIT src=192.168.1.7 dst=66.235.147.233 sport=55452 dport=443 src=66.235.147.233 dst=68.199.193.42 sport=443 dport=55452 [ASSURED] mark=0 use=1
818tcp 6 84 TIME_WAIT src=68.199.193.42 dst=64.1.16.27 sport=58954 dport=25 src=64.1.16.27 dst=68.199.193.42 sport=25 dport=58954 [ASSURED] mark=0 use=1
819udp 17 12 src=192.168.1.1 dst=192.168.1.1 sport=37592 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=37592 mark=0 use=1
820tcp 6 430859 ESTABLISHED src=192.168.1.7 dst=66.104.218.100 sport=51304 dport=143 src=66.104.218.100 dst=68.199.193.42 sport=143 dport=51304 [ASSURED] mark=0 use=1
821tcp 6 431959 ESTABLISHED src=192.168.1.35 dst=172.217.11.10 sport=49263 dport=443 src=172.217.11.10 dst=68.199.193.42 sport=443 dport=49263 [ASSURED] mark=0 use=1
822tcp 6 431968 ESTABLISHED src=192.168.1.7 dst=172.217.10.78 sport=35048 dport=443 src=172.217.10.78 dst=68.199.193.42 sport=443 dport=35048 [ASSURED] mark=0 use=1
823tcp 6 431956 ESTABLISHED src=192.168.1.7 dst=199.16.156.11 sport=57488 dport=443 src=199.16.156.11 dst=68.199.193.42 sport=443 dport=57488 [ASSURED] mark=0 use=1
824tcp 6 431994 ESTABLISHED src=192.168.1.7 dst=52.45.219.205 sport=49778 dport=443 src=52.45.219.205 dst=68.199.193.42 sport=443 dport=49778 [ASSURED] mark=0 use=1
825tcp 6 83 TIME_WAIT src=68.199.193.42 dst=66.104.218.100 sport=44474 dport=443 src=66.104.218.100 dst=68.199.193.42 sport=443 dport=44474 [ASSURED] mark=0 use=1
826tcp 6 94 TIME_WAIT src=192.168.1.7 dst=192.168.1.100 sport=40588 dport=80 src=192.168.1.100 dst=192.168.1.7 sport=80 dport=40588 [ASSURED] mark=0 use=1
827tcp 6 69 TIME_WAIT src=68.199.193.42 dst=64.1.16.3 sport=56080 dport=25 src=64.1.16.3 dst=68.199.193.42 sport=25 dport=56080 [ASSURED] mark=0 use=1
828udp 17 2 src=149.13.73.47 dst=68.199.193.44 sport=62538 dport=53 src=68.199.193.44 dst=149.13.73.47 sport=53 dport=62538 mark=0 use=1
829udp 17 25 src=68.199.193.42 dst=205.251.194.48 sport=45917 dport=53 src=205.251.194.48 dst=68.199.193.42 sport=53 dport=45917 mark=0 use=1
830udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=50346 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=50346 [ASSURED] mark=0 use=1
831tcp 6 431991 ESTABLISHED src=192.168.1.7 dst=35.173.3.255 sport=38738 dport=443 src=35.173.3.255 dst=68.199.193.42 sport=443 dport=38738 [ASSURED] mark=0 use=1
832tcp 6 78 TIME_WAIT src=68.199.193.42 dst=64.1.16.18 sport=38582 dport=443 src=64.1.16.18 dst=68.199.193.42 sport=443 dport=38582 [ASSURED] mark=0 use=1
833tcp 6 77 TIME_WAIT src=68.199.193.42 dst=64.1.16.5 sport=59596 dport=25 src=64.1.16.5 dst=68.199.193.42 sport=25 dport=59596 [ASSURED] mark=0 use=1
834tcp 6 431973 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=40044 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=40044 [ASSURED] mark=0 use=1
835tcp 6 62 TIME_WAIT src=68.199.193.42 dst=66.104.218.100 sport=44282 dport=443 src=66.104.218.100 dst=68.199.193.42 sport=443 dport=44282 [ASSURED] mark=0 use=1
836tcp 6 80 TIME_WAIT src=68.199.193.42 dst=64.1.16.18 sport=38604 dport=443 src=64.1.16.18 dst=68.199.193.42 sport=443 dport=38604 [ASSURED] mark=0 use=1
837tcp 6 431317 ESTABLISHED src=192.168.1.7 dst=68.192.251.223 sport=51144 dport=22 src=68.192.251.223 dst=68.199.193.42 sport=22 dport=51144 [ASSURED] mark=0 use=1
838tcp 6 431955 ESTABLISHED src=192.168.1.7 dst=151.101.208.159 sport=33698 dport=443 src=151.101.208.159 dst=68.199.193.42 sport=443 dport=33698 [ASSURED] mark=0 use=1
839udp 17 24 src=192.168.1.119 dst=8.8.8.8 sport=55867 dport=53 src=8.8.8.8 dst=68.199.193.42 sport=53 dport=55867 mark=0 use=1
840tcp 6 114 TIME_WAIT src=68.199.193.42 dst=184.154.50.20 sport=48306 dport=80 src=184.154.50.20 dst=68.199.193.42 sport=80 dport=48306 [ASSURED] mark=0 use=2
841tcp 6 12 TIME_WAIT src=127.0.0.1 dst=127.0.0.1 sport=41948 dport=8891 src=127.0.0.1 dst=127.0.0.1 sport=8891 dport=41948 [ASSURED] mark=0 use=1
842tcp 6 431973 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=45786 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=45786 [ASSURED] mark=0 use=1
843udp 17 15 src=192.168.1.7 dst=45.79.109.111 sport=57413 dport=123 src=45.79.109.111 dst=68.199.193.42 sport=123 dport=57413 mark=0 use=1
844tcp 6 431996 ESTABLISHED src=192.168.1.7 dst=172.217.3.100 sport=41848 dport=443 src=172.217.3.100 dst=68.199.193.42 sport=443 dport=41848 [ASSURED] mark=0 use=1
845tcp 6 431880 ESTABLISHED src=192.168.1.7 dst=64.1.16.23 sport=59884 dport=993 src=64.1.16.23 dst=68.199.193.42 sport=993 dport=59884 [ASSURED] mark=0 use=1
846tcp 6 431979 ESTABLISHED src=192.168.1.7 dst=172.217.10.46 sport=46414 dport=443 src=172.217.10.46 dst=68.199.193.42 sport=443 dport=46414 [ASSURED] mark=0 use=1
847tcp 6 69 TIME_WAIT src=68.199.193.42 dst=68.199.193.45 sport=35528 dport=25 src=68.199.193.45 dst=68.199.193.42 sport=25 dport=35528 [ASSURED] mark=0 use=1
848tcp 6 70 TIME_WAIT src=68.199.193.42 dst=64.1.16.3 sport=56090 dport=25 src=64.1.16.3 dst=68.199.193.42 sport=25 dport=56090 [ASSURED] mark=0 use=1
849tcp 6 431996 ESTABLISHED src=192.168.1.7 dst=31.13.71.1 sport=57622 dport=443 src=31.13.71.1 dst=68.199.193.42 sport=443 dport=57622 [ASSURED] mark=0 use=1
850tcp 6 118 SYN_SENT src=68.199.193.42 dst=107.155.66.2 sport=42184 dport=4949 [UNREPLIED] src=107.155.66.2 dst=68.199.193.42 sport=4949 dport=42184 mark=0 use=1
851udp 17 9 src=172.217.47.13 dst=68.199.193.44 sport=47978 dport=53 src=68.199.193.44 dst=172.217.47.13 sport=53 dport=47978 mark=0 use=1
852udp 17 162 src=192.168.1.1 dst=192.168.1.1 sport=59683 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=59683 [ASSURED] mark=0 use=1
853udp 17 25 src=202.19.222.23 dst=68.199.193.44 sport=51254 dport=53 src=68.199.193.44 dst=202.19.222.23 sport=53 dport=51254 mark=0 use=1
854udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=35788 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=35788 [ASSURED] mark=0 use=1
855tcp 6 89 TIME_WAIT src=68.199.193.42 dst=68.199.193.45 sport=35740 dport=25 src=68.199.193.45 dst=68.199.193.42 sport=25 dport=35740 [ASSURED] mark=0 use=1
856udp 17 9 src=192.168.1.7 dst=192.168.1.1 sport=58248 dport=53 src=192.168.1.1 dst=192.168.1.7 sport=53 dport=58248 mark=0 use=1
857udp 17 6 src=68.199.193.42 dst=8.254.13.2 sport=3170 dport=53 src=8.254.13.2 dst=68.199.193.42 sport=53 dport=3170 mark=0 use=1
858tcp 6 89 TIME_WAIT src=68.199.193.42 dst=64.1.16.27 sport=58992 dport=25 src=64.1.16.27 dst=68.199.193.42 sport=25 dport=58992 [ASSURED] mark=0 use=1
859tcp 6 75 TIME_WAIT src=68.199.193.42 dst=64.1.16.5 sport=59572 dport=25 src=64.1.16.5 dst=68.199.193.42 sport=25 dport=59572 [ASSURED] mark=0 use=1
860tcp 6 90 TIME_WAIT src=68.199.193.42 dst=68.199.193.45 sport=35742 dport=25 src=68.199.193.45 dst=68.199.193.42 sport=25 dport=35742 [ASSURED] mark=0 use=1
861udp 17 17 src=137.74.213.144 dst=68.199.193.44 sport=7791 dport=53 src=68.199.193.44 dst=137.74.213.144 sport=53 dport=7791 mark=0 use=1
862tcp 6 431995 ESTABLISHED src=192.168.1.119 dst=54.194.133.178 sport=53214 dport=5223 src=54.194.133.178 dst=68.199.193.42 sport=5223 dport=53214 [ASSURED] mark=0 use=1
863tcp 6 431956 ESTABLISHED src=192.168.1.7 dst=172.217.6.226 sport=42136 dport=443 src=172.217.6.226 dst=68.199.193.42 sport=443 dport=42136 [ASSURED] mark=0 use=1
864udp 17 29 src=64.1.16.1 dst=68.199.193.42 sport=500 dport=500 [UNREPLIED] src=68.199.193.42 dst=64.1.16.1 sport=500 dport=500 mark=0 use=1
865tcp 6 431996 ESTABLISHED src=192.168.1.7 dst=216.58.219.206 sport=45392 dport=443 src=216.58.219.206 dst=68.199.193.42 sport=443 dport=45392 [ASSURED] mark=0 use=1
866tcp 6 88 TIME_WAIT src=68.199.193.42 dst=64.1.16.27 sport=58984 dport=25 src=64.1.16.27 dst=68.199.193.42 sport=25 dport=58984 [ASSURED] mark=0 use=1
867tcp 6 431990 ESTABLISHED src=192.168.1.7 dst=31.13.71.36 sport=49650 dport=443 src=31.13.71.36 dst=68.199.193.42 sport=443 dport=49650 [ASSURED] mark=0 use=1
868udp 17 24 src=192.168.1.119 dst=8.8.4.4 sport=50778 dport=53 src=8.8.4.4 dst=68.199.193.42 sport=53 dport=50778 mark=0 use=1
869tcp 6 74 TIME_WAIT src=68.199.193.42 dst=64.1.16.5 sport=59558 dport=25 src=64.1.16.5 dst=68.199.193.42 sport=25 dport=59558 [ASSURED] mark=0 use=1
870udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=38052 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=38052 [ASSURED] mark=0 use=1
871tcp 6 71 TIME_WAIT src=68.199.193.42 dst=64.1.16.5 sport=59524 dport=25 src=64.1.16.5 dst=68.199.193.42 sport=25 dport=59524 [ASSURED] mark=0 use=1
872udp 17 98 src=192.168.1.1 dst=192.168.1.1 sport=44270 dport=53 src=192.168.1.1 dst=192.168.1.1 sport=53 dport=44270 [ASSURED] mark=0 use=1
873tcp 6 431974 ESTABLISHED src=192.168.1.7 dst=68.199.193.42 sport=40042 dport=993 src=68.199.193.42 dst=192.168.1.7 sport=993 dport=40042 [ASSURED] mark=0 use=1
874tcp 6 431975 ESTABLISHED src=192.168.1.35 dst=173.194.205.188 sport=65076 dport=5228 src=173.194.205.188 dst=68.199.193.42 sport=5228 dport=65076 [ASSURED] mark=0 use=1
875tcp 6 431987 ESTABLISHED src=192.168.1.35 dst=54.239.31.63 sport=65428 dport=443 src=54.239.31.63 dst=68.199.193.42 sport=443 dport=65428 [ASSURED] mark=0 use=1
876udp 17 6 src=68.199.193.42 dst=8.253.5.27 sport=39922 dport=53 src=8.253.5.27 dst=68.199.193.42 sport=53 dport=39922 mark=0 use=1
877tcp 6 431972 ESTABLISHED src=192.168.1.7 dst=172.217.9.238 sport=44050 dport=443 src=172.217.9.238 dst=68.199.193.42 sport=443 dport=44050 [ASSURED] mark=0 use=1
878tcp 6 431968 ESTABLISHED src=192.168.1.7 dst=192.241.187.124 sport=51964 dport=443 src=192.241.187.124 dst=68.199.193.42 sport=443 dport=51964 [ASSURED] mark=0 use=1
879tcp 6 74 TIME_WAIT src=68.199.193.42 dst=64.1.16.3 sport=56140 dport=25 src=64.1.16.3 dst=68.199.193.42 sport=25 dport=56140 [ASSURED] mark=0 use=1
880tcp 6 115 TIME_WAIT src=68.199.193.42 dst=64.1.16.4 sport=45776 dport=4949 src=64.1.16.4 dst=68.199.193.42 sport=4949 dport=45776 [ASSURED] mark=0 use=1
881udp 17 29 src=74.125.190.144 dst=68.199.193.44 sport=53227 dport=53 src=68.199.193.44 dst=74.125.190.144 sport=53 dport=53227 mark=0 use=2
882udp 17 14 src=68.199.193.42 dst=45.57.9.1 sport=13056 dport=53 src=45.57.9.1 dst=68.199.193.42 sport=53 dport=13056 mark=0 use=1
883tcp 6 70 TIME_WAIT src=68.199.193.42 dst=64.1.16.5 sport=59512 dport=25 src=64.1.16.5 dst=68.199.193.42 sport=25 dport=59512 [ASSURED] mark=0 use=1
884tcp 6 68 TIME_WAIT src=68.199.193.42 dst=64.1.16.18 sport=38470 dport=443 src=64.1.16.18 dst=68.199.193.42 sport=443 dport=38470 [ASSURED] mark=0 use=1
885udp 17 5 src=192.168.1.7 dst=192.168.1.1 sport=58830 dport=53 src=192.168.1.1 dst=192.168.1.7 sport=53 dport=58830 mark=0 use=1
886tcp 6 364081 ESTABLISHED src=192.168.1.119 dst=173.194.205.188 sport=54758 dport=5228 src=173.194.205.188 dst=68.199.193.42 sport=5228 dport=54758 [ASSURED] mark=0 use=1
887udp 17 14 src=165.254.102.81 dst=68.199.193.44 sport=31878 dport=53 src=68.199.193.44 dst=165.254.102.81 sport=53 dport=31878 mark=0 use=1
888tcp 6 88 TIME_WAIT src=68.199.193.42 dst=64.1.16.3 sport=56274 dport=25 src=64.1.16.3 dst=68.199.193.42 sport=25 dport=56274 [ASSURED] mark=0 use=1
889tcp 6 431995 ESTABLISHED src=192.168.1.7 dst=23.36.1.75 sport=49876 dport=443 src=23.36.1.75 dst=68.199.193.42 sport=443 dport=49876 [ASSURED] mark=0 use=1
890tcp 6 431974 ESTABLISHED src=192.168.1.7 dst=172.217.3.106 sport=50306 dport=443 src=172.217.3.106 dst=68.199.193.42 sport=443 dport=50306 [ASSURED] mark=0 use=1
891tcp 6 78 TIME_WAIT src=68.199.193.42 dst=64.1.16.5 sport=59608 dport=25 src=64.1.16.5 dst=68.199.193.42 sport=25 dport=59608 [ASSURED] mark=0 use=1
892tcp 6 291567 ESTABLISHED src=192.168.1.35 dst=172.217.197.188 sport=51726 dport=443 src=172.217.197.188 dst=68.199.193.42 sport=443 dport=51726 [ASSURED] mark=0 use=1
893tcp 6 431991 ESTABLISHED src=192.168.1.7 dst=31.13.71.1 sport=33144 dport=443 src=31.13.71.1 dst=68.199.193.42 sport=443 dport=33144 [ASSURED] mark=0 use=1
894
895IP Configuration
896
8971: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
898 inet 127.0.0.1/8 scope host lo
899 valid_lft forever preferred_lft forever
9003: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
901 inet 192.168.1.1/24 brd 192.168.1.255 scope global eth1
902 valid_lft forever preferred_lft forever
903 inet 192.168.6.1/24 brd 192.168.6.255 scope global eth1:2
904 valid_lft forever preferred_lft forever
905 inet 192.168.1.2/24 brd 192.168.1.255 scope global secondary eth1:0
906 valid_lft forever preferred_lft forever
907 inet 192.168.1.100/24 brd 192.168.1.255 scope global secondary eth1:1
908 valid_lft forever preferred_lft forever
909 inet 192.168.1.101/24 brd 192.168.1.255 scope global secondary eth1:3
910 valid_lft forever preferred_lft forever
9114: br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
912 inet 68.199.193.42/29 brd 68.199.193.47 scope global br0
913 valid_lft forever preferred_lft forever
914 inet 68.199.193.44/29 brd 68.199.193.47 scope global secondary br0:0
915 valid_lft forever preferred_lft forever
9166: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
917 inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
918 valid_lft forever preferred_lft forever
919
920IP Stats
921
9221: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
923 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
924 RX: bytes packets errors dropped overrun mcast
925 335467213 1617430 0 0 0 0
926 TX: bytes packets errors dropped carrier collsns
927 335467213 1617430 0 0 0 0
9282: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master br0 state UP mode DEFAULT group default qlen 1000
929 link/ether 0c:c4:7a:a9:18:de brd ff:ff:ff:ff:ff:ff
930 RX: bytes packets errors dropped overrun mcast
931 100497411001 96601496 0 0 0 106386
932 TX: bytes packets errors dropped carrier collsns
933 24373020619 57436588 0 0 0 0
9343: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
935 link/ether 0c:c4:7a:a9:18:df brd ff:ff:ff:ff:ff:ff
936 RX: bytes packets errors dropped overrun mcast
937 21959293692 51697123 0 0 0 1998
938 TX: bytes packets errors dropped carrier collsns
939 88375237443 75338241 0 0 0 0
9404: br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
941 link/ether 0c:c4:7a:a9:18:de brd ff:ff:ff:ff:ff:ff
942 RX: bytes packets errors dropped overrun mcast
943 98297450714 82896486 0 8 0 0
944 TX: bytes packets errors dropped carrier collsns
945 23855676636 52620937 0 0 0 0
9465: ip_vti0@NONE: <NOARP> mtu 1480 qdisc noop state DOWN mode DEFAULT group default qlen 1000
947 link/ipip 0.0.0.0 brd 0.0.0.0
948 RX: bytes packets errors dropped overrun mcast
949 0 0 0 0 0 0
950 TX: bytes packets errors dropped carrier collsns
951 0 0 0 0 0 0
9526: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN mode DEFAULT group default qlen 1000
953 link/ether 52:54:00:63:b9:2a brd ff:ff:ff:ff:ff:ff
954 RX: bytes packets errors dropped overrun mcast
955 0 0 0 0 0 0
956 TX: bytes packets errors dropped carrier collsns
957 0 0 0 0 0 0
9587: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc fq_codel master virbr0 state DOWN mode DEFAULT group default qlen 1000
959 link/ether 52:54:00:63:b9:2a brd ff:ff:ff:ff:ff:ff
960 RX: bytes packets errors dropped overrun mcast
961 0 0 0 0 0 0
962 TX: bytes packets errors dropped carrier collsns
963 0 0 0 0 0 0
9648: vnet0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel master br0 state UNKNOWN mode DEFAULT group default qlen 1000
965 link/ether fe:54:00:35:dd:67 brd ff:ff:ff:ff:ff:ff
966 RX: bytes packets errors dropped overrun mcast
967 241303534 157928 0 0 0 0
968 TX: bytes packets errors dropped carrier collsns
969 257223687 432577 0 0 0 0
970
971Bridges
972
973bridge name bridge id STP enabled interfaces
974br0 8000.0cc47aa918de no eth0
975 vnet0
976virbr0 8000.52540063b92a yes virbr0-nic
977
978Routing Rules
979
9800: from all lookup local
98132766: from all lookup main
98232767: from all lookup default
983
984Table default:
985
986
987Table local:
988
989local 68.199.193.44 dev br0 proto kernel scope host src 68.199.193.42
990local 68.199.193.42 dev br0 proto kernel scope host src 68.199.193.42
991local 192.168.6.1 dev eth1 proto kernel scope host src 192.168.6.1
992local 192.168.1.2 dev eth1 proto kernel scope host src 192.168.1.1
993local 192.168.122.1 dev virbr0 proto kernel scope host src 192.168.122.1
994local 192.168.1.1 dev eth1 proto kernel scope host src 192.168.1.1
995local 192.168.1.101 dev eth1 proto kernel scope host src 192.168.1.1
996local 192.168.1.100 dev eth1 proto kernel scope host src 192.168.1.1
997local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1
998broadcast 68.199.193.47 dev br0 proto kernel scope link src 68.199.193.42
999broadcast 68.199.193.40 dev br0 proto kernel scope link src 68.199.193.42
1000broadcast 192.168.6.255 dev eth1 proto kernel scope link src 192.168.6.1
1001broadcast 192.168.6.0 dev eth1 proto kernel scope link src 192.168.6.1
1002broadcast 192.168.1.255 dev eth1 proto kernel scope link src 192.168.1.1
1003broadcast 192.168.122.255 dev virbr0 proto kernel scope link src 192.168.122.1 linkdown
1004broadcast 192.168.122.0 dev virbr0 proto kernel scope link src 192.168.122.1 linkdown
1005broadcast 192.168.1.0 dev eth1 proto kernel scope link src 192.168.1.1
1006broadcast 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1
1007broadcast 127.0.0.0 dev lo proto kernel scope link src 127.0.0.1
1008local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1
1009
1010Table main:
1011
101268.199.193.40/29 dev br0 proto kernel scope link src 68.199.193.42
1013192.168.6.0/24 dev eth1 proto kernel scope link src 192.168.6.1
1014192.168.122.0/24 dev virbr0 proto kernel scope link src 192.168.122.1 linkdown
1015192.168.1.0/24 dev eth1 proto kernel scope link src 192.168.1.1
1016default via 68.199.193.41 dev br0
1017
1018Per-IP Counters
1019
1020 iptaccount is not installed
1021
1022NF Accounting
1023
1024No NF Accounting defined (nfacct not found)
1025
1026Events
1027
1028
1029PFKEY SPD
1030
1031src 68.199.193.40/29 dst 192.168.11.0/24 uid 0
1032 dir out action allow index 6985 priority 1041127 ptype main share any flag (0x00000000)
1033 lifetime config:
1034 limit: soft (INF)(bytes), hard (INF)(bytes)
1035 limit: soft (INF)(packets), hard (INF)(packets)
1036 expire add: soft 0(sec), hard 0(sec)
1037 expire use: soft 0(sec), hard 0(sec)
1038 lifetime current:
1039 0(bytes), 0(packets)
1040 add 2019-01-26 12:15:31 use 2019-01-26 12:57:59
1041 tmpl src 68.199.193.42 dst 68.192.251.223
1042 proto esp spi 0x00000000(0) reqid 16397(0x0000400d) mode tunnel
1043 level required share any
1044 enc-mask ffffffff auth-mask ffffffff comp-mask ffffffff
1045src 192.168.11.0/24 dst 68.199.193.40/29 uid 0
1046 dir fwd action allow index 7074 priority 1041127 ptype main share any flag (0x00000000)
1047 lifetime config:
1048 limit: soft (INF)(bytes), hard (INF)(bytes)
1049 limit: soft (INF)(packets), hard (INF)(packets)
1050 expire add: soft 0(sec), hard 0(sec)
1051 expire use: soft 0(sec), hard 0(sec)
1052 lifetime current:
1053 0(bytes), 0(packets)
1054 add 2019-01-26 12:15:31 use -
1055 tmpl src 68.192.251.223 dst 68.199.193.42
1056 proto esp spi 0x00000000(0) reqid 16397(0x0000400d) mode tunnel
1057 level required share any
1058 enc-mask ffffffff auth-mask ffffffff comp-mask ffffffff
1059src 192.168.11.0/24 dst 68.199.193.40/29 uid 0
1060 dir in action allow index 7064 priority 1041127 ptype main share any flag (0x00000000)
1061 lifetime config:
1062 limit: soft (INF)(bytes), hard (INF)(bytes)
1063 limit: soft (INF)(packets), hard (INF)(packets)
1064 expire add: soft 0(sec), hard 0(sec)
1065 expire use: soft 0(sec), hard 0(sec)
1066 lifetime current:
1067 0(bytes), 0(packets)
1068 add 2019-01-26 12:15:31 use -
1069 tmpl src 68.192.251.223 dst 68.199.193.42
1070 proto esp spi 0x00000000(0) reqid 16397(0x0000400d) mode tunnel
1071 level required share any
1072 enc-mask ffffffff auth-mask ffffffff comp-mask ffffffff
1073src 68.199.193.40/29 dst 192.168.10.0/24 uid 0
1074 dir out action allow index 6961 priority 1041127 ptype main share any flag (0x00000000)
1075 lifetime config:
1076 limit: soft (INF)(bytes), hard (INF)(bytes)
1077 limit: soft (INF)(packets), hard (INF)(packets)
1078 expire add: soft 0(sec), hard 0(sec)
1079 expire use: soft 0(sec), hard 0(sec)
1080 lifetime current:
1081 0(bytes), 0(packets)
1082 add 2019-01-26 12:15:31 use -
1083 tmpl src 68.199.193.42 dst 68.192.251.223
1084 proto esp spi 0x00000000(0) reqid 16401(0x00004011) mode tunnel
1085 level required share any
1086 enc-mask ffffffff auth-mask ffffffff comp-mask ffffffff
1087src 192.168.10.0/24 dst 68.199.193.40/29 uid 0
1088 dir fwd action allow index 7058 priority 1041127 ptype main share any flag (0x00000000)
1089 lifetime config:
1090 limit: soft (INF)(bytes), hard (INF)(bytes)
1091 limit: soft (INF)(packets), hard (INF)(packets)
1092 expire add: soft 0(sec), hard 0(sec)
1093 expire use: soft 0(sec), hard 0(sec)
1094 lifetime current:
1095 0(bytes), 0(packets)
1096 add 2019-01-26 12:15:31 use -
1097 tmpl src 68.192.251.223 dst 68.199.193.42
1098 proto esp spi 0x00000000(0) reqid 16401(0x00004011) mode tunnel
1099 level required share any
1100 enc-mask ffffffff auth-mask ffffffff comp-mask ffffffff
1101src 192.168.10.0/24 dst 68.199.193.40/29 uid 0
1102 dir in action allow index 7048 priority 1041127 ptype main share any flag (0x00000000)
1103 lifetime config:
1104 limit: soft (INF)(bytes), hard (INF)(bytes)
1105 limit: soft (INF)(packets), hard (INF)(packets)
1106 expire add: soft 0(sec), hard 0(sec)
1107 expire use: soft 0(sec), hard 0(sec)
1108 lifetime current:
1109 0(bytes), 0(packets)
1110 add 2019-01-26 12:15:31 use -
1111 tmpl src 68.192.251.223 dst 68.199.193.42
1112 proto esp spi 0x00000000(0) reqid 16401(0x00004011) mode tunnel
1113 level required share any
1114 enc-mask ffffffff auth-mask ffffffff comp-mask ffffffff
1115src 192.168.1.0/24 dst 192.168.10.0/24 uid 0
1116 dir out action allow index 7009 priority 1042407 ptype main share any flag (0x00000000)
1117 lifetime config:
1118 limit: soft (INF)(bytes), hard (INF)(bytes)
1119 limit: soft (INF)(packets), hard (INF)(packets)
1120 expire add: soft 0(sec), hard 0(sec)
1121 expire use: soft 0(sec), hard 0(sec)
1122 lifetime current:
1123 0(bytes), 0(packets)
1124 add 2019-01-26 12:15:31 use -
1125 tmpl src 68.199.193.42 dst 68.192.251.223
1126 proto esp spi 0x00000000(0) reqid 16393(0x00004009) mode tunnel
1127 level required share any
1128 enc-mask ffffffff auth-mask ffffffff comp-mask ffffffff
1129src 192.168.10.0/24 dst 192.168.1.0/24 uid 0
1130 dir fwd action allow index 7042 priority 1042407 ptype main share any flag (0x00000000)
1131 lifetime config:
1132 limit: soft (INF)(bytes), hard (INF)(bytes)
1133 limit: soft (INF)(packets), hard (INF)(packets)
1134 expire add: soft 0(sec), hard 0(sec)
1135 expire use: soft 0(sec), hard 0(sec)
1136 lifetime current:
1137 0(bytes), 0(packets)
1138 add 2019-01-26 12:15:31 use -
1139 tmpl src 68.192.251.223 dst 68.199.193.42
1140 proto esp spi 0x00000000(0) reqid 16393(0x00004009) mode tunnel
1141 level required share any
1142 enc-mask ffffffff auth-mask ffffffff comp-mask ffffffff
1143src 192.168.10.0/24 dst 192.168.1.0/24 uid 0
1144 dir in action allow index 7032 priority 1042407 ptype main share any flag (0x00000000)
1145 lifetime config:
1146 limit: soft (INF)(bytes), hard (INF)(bytes)
1147 limit: soft (INF)(packets), hard (INF)(packets)
1148 expire add: soft 0(sec), hard 0(sec)
1149 expire use: soft 0(sec), hard 0(sec)
1150 lifetime current:
1151 0(bytes), 0(packets)
1152 add 2019-01-26 12:15:31 use -
1153 tmpl src 68.192.251.223 dst 68.199.193.42
1154 proto esp spi 0x00000000(0) reqid 16393(0x00004009) mode tunnel
1155 level required share any
1156 enc-mask ffffffff auth-mask ffffffff comp-mask ffffffff
1157src 192.168.1.0/24 dst 192.168.11.0/24 uid 0
1158 dir out action allow index 6937 priority 1042407 ptype main share any flag (0x00000000)
1159 lifetime config:
1160 limit: soft (INF)(bytes), hard (INF)(bytes)
1161 limit: soft (INF)(packets), hard (INF)(packets)
1162 expire add: soft 0(sec), hard 0(sec)
1163 expire use: soft 0(sec), hard 0(sec)
1164 lifetime current:
1165 0(bytes), 0(packets)
1166 add 2019-01-26 12:15:25 use -
1167 tmpl src 68.199.193.42 dst 68.192.251.223
1168 proto esp spi 0x00000000(0) reqid 16389(0x00004005) mode tunnel
1169 level required share any
1170 enc-mask ffffffff auth-mask ffffffff comp-mask ffffffff
1171src 192.168.11.0/24 dst 192.168.1.0/24 uid 0
1172 dir fwd action allow index 7026 priority 1042407 ptype main share any flag (0x00000000)
1173 lifetime config:
1174 limit: soft (INF)(bytes), hard (INF)(bytes)
1175 limit: soft (INF)(packets), hard (INF)(packets)
1176 expire add: soft 0(sec), hard 0(sec)
1177 expire use: soft 0(sec), hard 0(sec)
1178 lifetime current:
1179 0(bytes), 0(packets)
1180 add 2019-01-26 12:15:25 use -
1181 tmpl src 68.192.251.223 dst 68.199.193.42
1182 proto esp spi 0x00000000(0) reqid 16389(0x00004005) mode tunnel
1183 level required share any
1184 enc-mask ffffffff auth-mask ffffffff comp-mask ffffffff
1185src 192.168.11.0/24 dst 192.168.1.0/24 uid 0
1186 dir in action allow index 7016 priority 1042407 ptype main share any flag (0x00000000)
1187 lifetime config:
1188 limit: soft (INF)(bytes), hard (INF)(bytes)
1189 limit: soft (INF)(packets), hard (INF)(packets)
1190 expire add: soft 0(sec), hard 0(sec)
1191 expire use: soft 0(sec), hard 0(sec)
1192 lifetime current:
1193 0(bytes), 0(packets)
1194 add 2019-01-26 12:15:25 use -
1195 tmpl src 68.192.251.223 dst 68.199.193.42
1196 proto esp spi 0x00000000(0) reqid 16389(0x00004005) mode tunnel
1197 level required share any
1198 enc-mask ffffffff auth-mask ffffffff comp-mask ffffffff
1199
1200PFKEY SAD
1201
1202src 68.192.251.223 dst 68.199.193.42
1203 proto esp spi 0x8c73dd85(2356403589) reqid 16397(0x0000400d) mode tunnel
1204 replay-window 32 seq 0x00000000 flag af-unspec (0x00100000)
1205 aead rfc4106(gcm(aes)) 0xcaf39a3a92d6747bcf812a17a11e71b2196e559c52d81e7c4a960e0f716cfa486500f7c9 (288 bits) 128
1206 anti-replay context: seq 0x0, oseq 0x0, bitmap 0x00000000
1207 lifetime config:
1208 limit: soft (INF)(bytes), hard (INF)(bytes)
1209 limit: soft (INF)(packets), hard (INF)(packets)
1210 expire add: soft 0(sec), hard 0(sec)
1211 expire use: soft 0(sec), hard 0(sec)
1212 lifetime current:
1213 0(bytes), 0(packets)
1214 add 2019-01-26 12:15:31 use -
1215 stats:
1216 replay-window 0 replay 0 failed 0
1217src 68.199.193.42 dst 68.192.251.223
1218 proto esp spi 0xe179df18(3782860568) reqid 16397(0x0000400d) mode tunnel
1219 replay-window 32 seq 0x00000000 flag af-unspec (0x00100000)
1220 aead rfc4106(gcm(aes)) 0x331192f7b1465a88b8dfcd4e8df35661c2ec208836cad438e9d2c23a5a7788a8132a2d0c (288 bits) 128
1221 anti-replay context: seq 0x0, oseq 0x0, bitmap 0x00000000
1222 lifetime config:
1223 limit: soft (INF)(bytes), hard (INF)(bytes)
1224 limit: soft (INF)(packets), hard (INF)(packets)
1225 expire add: soft 0(sec), hard 0(sec)
1226 expire use: soft 0(sec), hard 0(sec)
1227 lifetime current:
1228 0(bytes), 0(packets)
1229 add 2019-01-26 12:15:31 use -
1230 stats:
1231 replay-window 0 replay 0 failed 0
1232src 68.192.251.223 dst 68.199.193.42
1233 proto esp spi 0xcd99a3f6(3449398262) reqid 16401(0x00004011) mode tunnel
1234 replay-window 32 seq 0x00000000 flag af-unspec (0x00100000)
1235 aead rfc4106(gcm(aes)) 0xf9bf9d5a5c5ebd24ea6481488a6a7a2ec276c15f863d0afd4aacbd40ff184c102d6f4360 (288 bits) 128
1236 anti-replay context: seq 0x0, oseq 0x0, bitmap 0x00000000
1237 lifetime config:
1238 limit: soft (INF)(bytes), hard (INF)(bytes)
1239 limit: soft (INF)(packets), hard (INF)(packets)
1240 expire add: soft 0(sec), hard 0(sec)
1241 expire use: soft 0(sec), hard 0(sec)
1242 lifetime current:
1243 0(bytes), 0(packets)
1244 add 2019-01-26 12:15:31 use -
1245 stats:
1246 replay-window 0 replay 0 failed 0
1247src 68.199.193.42 dst 68.192.251.223
1248 proto esp spi 0x4238d5ec(1111021036) reqid 16401(0x00004011) mode tunnel
1249 replay-window 32 seq 0x00000000 flag af-unspec (0x00100000)
1250 aead rfc4106(gcm(aes)) 0x4e798d9658be6b66622abc73a14a56509e8ec39aebee8f50a71f0d6de622bbe94f9083c1 (288 bits) 128
1251 anti-replay context: seq 0x0, oseq 0x0, bitmap 0x00000000
1252 lifetime config:
1253 limit: soft (INF)(bytes), hard (INF)(bytes)
1254 limit: soft (INF)(packets), hard (INF)(packets)
1255 expire add: soft 0(sec), hard 0(sec)
1256 expire use: soft 0(sec), hard 0(sec)
1257 lifetime current:
1258 0(bytes), 0(packets)
1259 add 2019-01-26 12:15:31 use -
1260 stats:
1261 replay-window 0 replay 0 failed 0
1262src 68.192.251.223 dst 68.199.193.42
1263 proto esp spi 0x011f901e(18845726) reqid 16393(0x00004009) mode tunnel
1264 replay-window 32 seq 0x00000000 flag af-unspec (0x00100000)
1265 aead rfc4106(gcm(aes)) 0x950267cb410262a4cdf760be4abfec4cf8cbf164761252c134e5d978992745ae9b5f7e7d (288 bits) 128
1266 anti-replay context: seq 0x0, oseq 0x0, bitmap 0x00000000
1267 lifetime config:
1268 limit: soft (INF)(bytes), hard (INF)(bytes)
1269 limit: soft (INF)(packets), hard (INF)(packets)
1270 expire add: soft 0(sec), hard 0(sec)
1271 expire use: soft 0(sec), hard 0(sec)
1272 lifetime current:
1273 0(bytes), 0(packets)
1274 add 2019-01-26 12:15:31 use -
1275 stats:
1276 replay-window 0 replay 0 failed 0
1277src 68.199.193.42 dst 68.192.251.223
1278 proto esp spi 0x7696fb93(1989606291) reqid 16393(0x00004009) mode tunnel
1279 replay-window 32 seq 0x00000000 flag af-unspec (0x00100000)
1280 aead rfc4106(gcm(aes)) 0xea5a9ec5914a69e8d46dba894e15cea133c5e1955ccbf33aeb37926725c5a3a759040fd4 (288 bits) 128
1281 anti-replay context: seq 0x0, oseq 0x0, bitmap 0x00000000
1282 lifetime config:
1283 limit: soft (INF)(bytes), hard (INF)(bytes)
1284 limit: soft (INF)(packets), hard (INF)(packets)
1285 expire add: soft 0(sec), hard 0(sec)
1286 expire use: soft 0(sec), hard 0(sec)
1287 lifetime current:
1288 0(bytes), 0(packets)
1289 add 2019-01-26 12:15:31 use -
1290 stats:
1291 replay-window 0 replay 0 failed 0
1292src 68.192.251.223 dst 68.199.193.42
1293 proto esp spi 0x158eafea(361672682) reqid 16389(0x00004005) mode tunnel
1294 replay-window 32 seq 0x00000000 flag af-unspec (0x00100000)
1295 aead rfc4106(gcm(aes)) 0xb8a49aa964d5a39b87574f3208ca4bfcbdf585eb78b679dcc8bcbc1f95654e644acbfdb7 (288 bits) 128
1296 anti-replay context: seq 0x0, oseq 0x0, bitmap 0x00000000
1297 lifetime config:
1298 limit: soft (INF)(bytes), hard (INF)(bytes)
1299 limit: soft (INF)(packets), hard (INF)(packets)
1300 expire add: soft 0(sec), hard 0(sec)
1301 expire use: soft 0(sec), hard 0(sec)
1302 lifetime current:
1303 0(bytes), 0(packets)
1304 add 2019-01-26 12:15:25 use -
1305 stats:
1306 replay-window 0 replay 0 failed 0
1307src 68.199.193.42 dst 68.192.251.223
1308 proto esp spi 0x5e4c977b(1582077819) reqid 16389(0x00004005) mode tunnel
1309 replay-window 32 seq 0x00000000 flag af-unspec (0x00100000)
1310 aead rfc4106(gcm(aes)) 0x7f38fac21860165cac42abe7fb9006f8100117033a27c056931b7f7b7ef3f61b6a2ea16c (288 bits) 128
1311 anti-replay context: seq 0x0, oseq 0x0, bitmap 0x00000000
1312 lifetime config:
1313 limit: soft (INF)(bytes), hard (INF)(bytes)
1314 limit: soft (INF)(packets), hard (INF)(packets)
1315 expire add: soft 0(sec), hard 0(sec)
1316 expire use: soft 0(sec), hard 0(sec)
1317 lifetime current:
1318 0(bytes), 0(packets)
1319 add 2019-01-26 12:15:25 use -
1320 stats:
1321 replay-window 0 replay 0 failed 0
1322
1323/proc
1324
1325 /proc/version = Linux version 4.19.16-200.fc28.x86_64 (mockbuild@bkernel04.phx2.fedoraproject.org) (gcc version 8.2.1 20181215 (Red Hat 8.2.1-6) (GCC)) #1 SMP Thu Jan 17 00:16:20 UTC 2019
1326 /proc/sys/net/ipv4/ip_forward = 1
1327 /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
1328 /proc/sys/net/ipv4/conf/all/proxy_arp = 0
1329 /proc/sys/net/ipv4/conf/all/arp_filter = 0
1330 /proc/sys/net/ipv4/conf/all/arp_ignore = 0
1331 /proc/sys/net/ipv4/conf/all/rp_filter = 0
1332 /proc/sys/net/ipv4/conf/all/log_martians = 0
1333 /proc/sys/net/ipv4/conf/br0/proxy_arp = 0
1334 /proc/sys/net/ipv4/conf/br0/arp_filter = 0
1335 /proc/sys/net/ipv4/conf/br0/arp_ignore = 0
1336 /proc/sys/net/ipv4/conf/br0/rp_filter = 1
1337 /proc/sys/net/ipv4/conf/br0/log_martians = 1
1338 /proc/sys/net/ipv4/conf/default/proxy_arp = 0
1339 /proc/sys/net/ipv4/conf/default/arp_filter = 0
1340 /proc/sys/net/ipv4/conf/default/arp_ignore = 0
1341 /proc/sys/net/ipv4/conf/default/rp_filter = 0
1342 /proc/sys/net/ipv4/conf/default/log_martians = 1
1343 /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
1344 /proc/sys/net/ipv4/conf/eth0/arp_filter = 0
1345 /proc/sys/net/ipv4/conf/eth0/arp_ignore = 0
1346 /proc/sys/net/ipv4/conf/eth0/rp_filter = 0
1347 /proc/sys/net/ipv4/conf/eth0/log_martians = 1
1348 /proc/sys/net/ipv4/conf/eth1/proxy_arp = 0
1349 /proc/sys/net/ipv4/conf/eth1/arp_filter = 0
1350 /proc/sys/net/ipv4/conf/eth1/arp_ignore = 0
1351 /proc/sys/net/ipv4/conf/eth1/rp_filter = 1
1352 /proc/sys/net/ipv4/conf/eth1/log_martians = 1
1353 /proc/sys/net/ipv4/conf/ip_vti0/proxy_arp = 0
1354 /proc/sys/net/ipv4/conf/ip_vti0/arp_filter = 0
1355 /proc/sys/net/ipv4/conf/ip_vti0/arp_ignore = 0
1356 /proc/sys/net/ipv4/conf/ip_vti0/rp_filter = 0
1357 /proc/sys/net/ipv4/conf/ip_vti0/log_martians = 1
1358 /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
1359 /proc/sys/net/ipv4/conf/lo/arp_filter = 0
1360 /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
1361 /proc/sys/net/ipv4/conf/lo/rp_filter = 0
1362 /proc/sys/net/ipv4/conf/lo/log_martians = 1
1363 /proc/sys/net/ipv4/conf/virbr0/proxy_arp = 0
1364 /proc/sys/net/ipv4/conf/virbr0/arp_filter = 0
1365 /proc/sys/net/ipv4/conf/virbr0/arp_ignore = 0
1366 /proc/sys/net/ipv4/conf/virbr0/rp_filter = 0
1367 /proc/sys/net/ipv4/conf/virbr0/log_martians = 1
1368 /proc/sys/net/ipv4/conf/virbr0-nic/proxy_arp = 0
1369 /proc/sys/net/ipv4/conf/virbr0-nic/arp_filter = 0
1370 /proc/sys/net/ipv4/conf/virbr0-nic/arp_ignore = 0
1371 /proc/sys/net/ipv4/conf/virbr0-nic/rp_filter = 0
1372 /proc/sys/net/ipv4/conf/virbr0-nic/log_martians = 1
1373 /proc/sys/net/ipv4/conf/vnet0/proxy_arp = 0
1374 /proc/sys/net/ipv4/conf/vnet0/arp_filter = 0
1375 /proc/sys/net/ipv4/conf/vnet0/arp_ignore = 0
1376 /proc/sys/net/ipv4/conf/vnet0/rp_filter = 0
1377 /proc/sys/net/ipv4/conf/vnet0/log_martians = 1
1378
1379ARP
1380
1381? (192.168.1.107) at 00:04:f2:28:84:86 [ether] on eth1
1382? (192.168.1.106) at 00:04:f2:2f:41:28 [ether] on eth1
1383? (192.168.1.105) at <incomplete> on eth1
1384? (192.168.1.104) at 00:80:77:36:4a:b6 [ether] on eth1
1385? (192.168.1.119) at a0:cc:2b:8b:52:1a [ether] on eth1
1386? (192.168.1.117) at 00:18:dd:05:81:4e [ether] on eth1
1387? (192.168.1.23) at 74:c2:46:cd:19:38 [ether] on eth1
1388? (192.168.1.35) at 00:71:c2:46:95:79 [ether] on eth1
1389? (192.168.1.116) at 00:04:f2:2e:4b:55 [ether] on eth1
1390? (68.199.193.41) at a4:15:88:a9:30:b7 [ether] on br0
1391? (192.168.1.115) at 00:04:f2:2c:88:be [ether] on eth1
1392? (192.168.1.114) at 50:f5:da:65:2f:5f [ether] on eth1
1393? (192.168.1.19) at <incomplete> on eth1
1394? (192.168.1.113) at 0c:47:c9:7b:4e:b2 [ether] on eth1
1395? (192.168.1.7) at 4c:ed:fb:bb:47:93 [ether] on eth1
1396? (68.199.193.46) at 52:54:00:35:dd:67 [ether] on br0
1397? (192.168.1.112) at 64:16:66:39:2e:40 [ether] on eth1
1398? (68.199.193.45) at 14:da:e9:97:ab:71 [ether] on br0
1399? (192.168.1.18) at <incomplete> on eth1
1400? (192.168.1.43) at <incomplete> on eth1
1401? (192.168.1.111) at <incomplete> on eth1
1402? (192.168.1.81) at 00:06:dc:82:21:d0 [ether] on eth1
1403? (192.168.1.109) at <incomplete> on eth1
1404? (192.168.1.108) at <incomplete> on eth1
1405? (192.168.1.120) at 84:f3:eb:66:d4:4c [ether] on eth1
1406
1407Modules
1408
1409ip_set 45056 2 ip_set_hash_ip,xt_set
1410ip_set_hash_ip 36864 0
1411iptable_mangle 16384 1
1412iptable_nat 16384 1
1413iptable_raw 16384 1
1414ipt_MASQUERADE 16384 4
1415ipt_rpfilter 16384 0
1416ip_tunnel 24576 1 ip_vti
1417ip_vti 16384 0
1418nf_conncount 20480 1 xt_connlimit
1419nf_conntrack 163840 32 xt_conntrack,nf_nat_irc,nf_nat,nf_conntrack_tftp,nf_nat_ftp,nf_conntrack_pptp,ipt_MASQUERADE,nf_conntrack_netbios_ns,nf_conntrack_sane,nf_nat_ipv4,xt_nat,nf_nat_tftp,nf_nat_amanda,nf_conntrack_sip,xt_helper,nf_conntrack_h323,nf_nat_pptp,xt_NETMAP,nf_conntrack_broadcast,nf_conntrack_irc,nf_conntrack_amanda,nf_conntrack_netlink,xt_connmark,nf_conntrack_proto_gre,nf_conntrack_ftp,xt_CT,nf_nat_h323,nf_conncount,nf_conntrack_snmp,nf_nat_snmp_basic,xt_connlimit,nf_nat_sip
1420nf_conntrack_amanda 16384 3 nf_nat_amanda
1421nf_conntrack_broadcast 16384 2 nf_conntrack_netbios_ns,nf_conntrack_snmp
1422nf_conntrack_ftp 20480 3 nf_nat_ftp
1423nf_conntrack_h323 77824 5 nf_nat_h323
1424nf_conntrack_irc 16384 3 nf_nat_irc
1425nf_conntrack_netbios_ns 16384 2
1426nf_conntrack_netlink 49152 0
1427nf_conntrack_pptp 16384 3 nf_nat_pptp
1428nf_conntrack_proto_gre 16384 1 nf_conntrack_pptp
1429nf_conntrack_sane 16384 2
1430nf_conntrack_sip 32768 3 nf_nat_sip
1431nf_conntrack_snmp 16384 3 nf_nat_snmp_basic
1432nf_conntrack_tftp 16384 3 nf_nat_tftp
1433nf_defrag_ipv4 16384 2 nf_conntrack,xt_TPROXY
1434nf_defrag_ipv6 20480 2 nf_conntrack,xt_TPROXY
1435nf_log_common 16384 1 nf_log_ipv4
1436nf_log_ipv4 16384 10
1437nf_nat 36864 11 nf_nat_irc,nf_nat_ftp,nf_nat_ipv4,xt_nat,nf_nat_tftp,nf_nat_amanda,nf_nat_pptp,xt_NETMAP,nf_nat_h323,nf_nat_proto_gre,nf_nat_sip
1438nf_nat_amanda 16384 0
1439nf_nat_ftp 16384 0
1440nf_nat_h323 20480 0
1441nf_nat_ipv4 16384 2 ipt_MASQUERADE,iptable_nat
1442nf_nat_irc 16384 0
1443nf_nat_pptp 16384 0
1444nf_nat_proto_gre 16384 1 nf_nat_pptp
1445nf_nat_sip 20480 0
1446nf_nat_snmp_basic 16384 0
1447nf_nat_tftp 16384 0
1448nf_tproxy_ipv4 16384 1 xt_TPROXY
1449nf_tproxy_ipv6 16384 1 xt_TPROXY
1450xt_addrtype 16384 23
1451xt_AUDIT 16384 0
1452xt_CHECKSUM 16384 0
1453xt_CLASSIFY 16384 0
1454xt_comment 16384 20
1455xt_connlimit 16384 0
1456xt_connmark 16384 0
1457xt_conntrack 16384 16
1458xt_CT 16384 22
1459xt_dscp 16384 0
1460xt_DSCP 16384 0
1461xt_hashlimit 20480 10
1462xt_helper 16384 0
1463xt_iprange 16384 0
1464xt_length 16384 0
1465xt_LOG 16384 10
1466xt_mark 16384 1
1467xt_multiport 16384 5
1468xt_nat 16384 8
1469xt_NETMAP 16384 0
1470xt_NFLOG 16384 0
1471xt_NFQUEUE 16384 0
1472xt_owner 16384 0
1473xt_physdev 16384 0
1474xt_policy 16384 35
1475xt_realm 16384 0
1476xt_recent 20480 1
1477xt_set 16384 0
1478xt_statistic 16384 0
1479xt_tcpmss 16384 3
1480xt_TCPMSS 16384 3
1481xt_time 16384 0
1482xt_TPROXY 16384 0
1483
1484Shorewall has detected the following iptables/netfilter capabilities:
1485 ACCOUNT Target (ACCOUNT_TARGET): Not available
1486 Address Type Match (ADDRTYPE): Available
1487 Amanda Helper: Available
1488 Arptables JF (ARPTABLESJF): Not available
1489 AUDIT Target (AUDIT_TARGET): Available
1490 Basic Ematch (BASIC_EMATCH): Available
1491 Basic Filter (BASIC_FILTER): Available
1492 Capabilities Version (CAPVERSION): 50200
1493 Checksum Target (CHECKSUM_TARGET): Available
1494 CLASSIFY Target (CLASSIFY_TARGET): Available
1495 Comments (COMMENTS): Available
1496 Condition Match (CONDITION_MATCH): Not available
1497 Connection Tracking Match (CONNTRACK_MATCH): Available
1498 Connlimit Match (CONNLIMIT_MATCH): Available
1499 Connmark Match (CONNMARK_MATCH): Available
1500 CONNMARK Target (CONNMARK): Available
1501 CT Target (CT_TARGET): Available
1502 DSCP Match (DSCP_MATCH): Available
1503 DSCP Target (DSCP_TARGET): Available
1504 Enhanced Multi-port Match (EMULIPORT): Available
1505 Extended Connection Tracking Match Support (NEW_CONNTRACK_MATCH): Available
1506 Extended Connmark Match (XCONNMARK_MATCH): Available
1507 Extended CONNMARK Target (XCONNMARK): Available
1508 Extended MARK Target 2 (EXMARK): Available
1509 Extended MARK Target (XMARK): Available
1510 Extended Multi-port Match (XMULIPORT): Available
1511 Extended REJECT (ENHANCED_REJECT): Available
1512 FLOW Classifier (FLOW_FILTER): Available
1513 FTP-0 Helper: Not available
1514 FTP Helper: Available
1515 fwmark route mask (FWMARK_RT_MASK): Available
1516 Geo IP Match (GEOIP_MATCH): Not available
1517 Goto Support (GOTO_TARGET): Available
1518 H323 Helper: Available
1519 Hashlimit Match (HASHLIMIT_MATCH): Available
1520 Header Match (HEADER_MATCH): Not available
1521 Helper Match (HELPER_MATCH): Available
1522 Iface Match (IFACE_MATCH): Not available
1523 IMQ Target (IMQ_TARGET): Not available
1524 INPUT chain in nat table (NAT_INPUT_CHAIN): Available
1525 IPMARK Target (IPMARK_TARGET): Not available
1526 IPP2P Match (IPP2P_MATCH): Not available
1527 IP range Match(IPRANGE_MATCH): Available
1528 Ipset Match Counters (IPSET_MATCH_COUNTERS): Available
1529 Ipset Match (IPSET_MATCH): Available
1530 Ipset Match Nomatch (IPSET_MATCH_NOMATCH): Available
1531 ipset V5 (IPSET_V5): Available
1532 iptables-restore --wait option (RESTORE_WAIT_OPTION): Available
1533 iptables -S (IPTABLES_S): Available
1534 iptables --wait option (WAIT_OPTION): Available
1535 IRC-0 Helper: Not available
1536 IRC Helper: Available
1537 Kernel Version (KERNELVERSION): 41916
1538 LOGMARK Target (LOGMARK_TARGET): Not available
1539 LOG Target (LOG_TARGET): Available
1540 Mangle FORWARD Chain (MANGLE_FORWARD): Available
1541 Mark in the filter table (MARK_ANYWHERE): Available
1542 MARK Target (MARK): Available
1543 MASQUERADE Target (MASQUERADE_TGT): Available
1544 Multi-port Match (MULTIPORT): Available
1545 NAT (NAT_ENABLED): Available
1546 Netbios_ns Helper: Available
1547 NETMAP Target (NETMAP_TARGET): Available
1548 New tos Match (NEW_TOS_MATCH): Available
1549 NFAcct Match: Not available
1550 --nflog-size support (NFLOG_SIZE): Available
1551 NFLOG Target (NFLOG_TARGET): Available
1552 NFQUEUE CPU Fanout (CPU_FANOUT): Available
1553 NFQUEUE Target (NFQUEUE_TARGET): Available
1554 Owner Match (OWNER_MATCH): Available
1555 Owner Name Match (OWNER_NAME_MATCH): Available
1556 Packet length Match (LENGTH_MATCH): Available
1557 Packet Mangling (MANGLE_ENABLED): Available
1558 Persistent SNAT (PERSISTENT_SNAT): Available
1559 Physdev-is-bridged Support (PHYSDEV_BRIDGE): Available
1560 Physdev Match (PHYSDEV_MATCH): Available
1561 Policy Match (POLICY_MATCH): Available
1562 PPTP Helper: Available
1563 Raw Table (RAW_TABLE): Available
1564 Realm Match (REALM_MATCH): Available
1565 Recent Match "--reap" option (REAP_OPTION): Available
1566 Recent Match (RECENT_MATCH): Available
1567 Repeat match (KLUDGEFREE): Available
1568 RPFilter Match (RPFILTER_MATCH): Available
1569 SANE-0 Helper: Not available
1570 SANE Helper: Available
1571 SIP-0 Helper: Not available
1572 SIP Helper: Available
1573 SNMP Helper: Available
1574 Statistic Match (STATISTIC_MATCH): Available
1575 TARPIT Target (TARPIT_TARGET): Not available
1576 TCPMSS Match (TCPMSS_MATCH): Available
1577 TCPMSS Target (TCPMSS_TARGET): Available
1578 TFTP-0 Helper: Not available
1579 TFTP Helper: Available
1580 Time Match (TIME_MATCH): Available
1581 TPROXY Target (TPROXY_TARGET): Available
1582 UDPLITE Port Redirection (UDPLITEREDIRECT): Not available
1583 ULOG Target (ULOG_TARGET): Not available
1584
1585Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port
1586udp UNCONN 0 0 127.0.0.1:4500 0.0.0.0:* users:(("pluto",pid=14996,fd=32))
1587udp UNCONN 0 0 192.168.1.1:4500 0.0.0.0:* users:(("pluto",pid=14996,fd=30))
1588udp UNCONN 0 0 192.168.6.1:4500 0.0.0.0:* users:(("pluto",pid=14996,fd=28))
1589udp UNCONN 0 0 192.168.1.2:4500 0.0.0.0:* users:(("pluto",pid=14996,fd=26))
1590udp UNCONN 0 0 192.168.1.100:4500 0.0.0.0:* users:(("pluto",pid=14996,fd=24))
1591udp UNCONN 0 0 192.168.1.101:4500 0.0.0.0:* users:(("pluto",pid=14996,fd=22))
1592udp UNCONN 0 0 68.199.193.42:4500 0.0.0.0:* users:(("pluto",pid=14996,fd=20))
1593udp UNCONN 0 0 68.199.193.44:4500 0.0.0.0:* users:(("pluto",pid=14996,fd=18))
1594udp UNCONN 0 0 192.168.122.1:4500 0.0.0.0:* users:(("pluto",pid=14996,fd=16))
1595udp UNCONN 0 0 0.0.0.0:4520 0.0.0.0:* users:(("asterisk",pid=1390,fd=18))
1596udp UNCONN 0 0 0.0.0.0:5060 0.0.0.0:* users:(("asterisk",pid=1390,fd=15))
1597udp UNCONN 0 0 127.0.0.1:8125 0.0.0.0:* users:(("netdata",pid=1387,fd=8))
1598udp UNCONN 0 0 192.168.122.1:53 0.0.0.0:* users:(("dnsmasq",pid=3207,fd=5))
1599udp UNCONN 0 0 68.199.193.44:53 0.0.0.0:* users:(("named",pid=1511,fd=544),("named",pid=1511,fd=543),("named",pid=1511,fd=542),("named",pid=1511,fd=541),("named",pid=1511,fd=540),("named",pid=1511,fd=539),("named",pid=1511,fd=538),("named",pid=1511,fd=537),("named",pid=1511,fd=536),("named",pid=1511,fd=535),("named",pid=1511,fd=534))
1600udp UNCONN 0 0 192.168.1.1:53 0.0.0.0:* users:(("named",pid=1511,fd=533),("named",pid=1511,fd=532),("named",pid=1511,fd=531),("named",pid=1511,fd=530),("named",pid=1511,fd=529),("named",pid=1511,fd=528),("named",pid=1511,fd=527),("named",pid=1511,fd=526),("named",pid=1511,fd=525),("named",pid=1511,fd=524),("named",pid=1511,fd=523))
1601udp UNCONN 0 0 127.0.0.1:53 0.0.0.0:* users:(("named",pid=1511,fd=522),("named",pid=1511,fd=521),("named",pid=1511,fd=520),("named",pid=1511,fd=519),("named",pid=1511,fd=518),("named",pid=1511,fd=517),("named",pid=1511,fd=516),("named",pid=1511,fd=515),("named",pid=1511,fd=514),("named",pid=1511,fd=513),("named",pid=1511,fd=512))
1602udp UNCONN 0 0 0.0.0.0:67 0.0.0.0:* users:(("dhcpd",pid=32385,fd=10))
1603udp UNCONN 0 0 0.0.0.0%virbr0:67 0.0.0.0:* users:(("dnsmasq",pid=3207,fd=3))
1604udp UNCONN 0 0 0.0.0.0:111 0.0.0.0:* users:(("systemd",pid=1,fd=99))
1605udp UNCONN 0 0 192.168.1.101:123 0.0.0.0:* users:(("ntpd",pid=864,fd=33))
1606udp UNCONN 0 0 192.168.6.1:123 0.0.0.0:* users:(("ntpd",pid=864,fd=32))
1607udp UNCONN 0 0 192.168.1.100:123 0.0.0.0:* users:(("ntpd",pid=864,fd=31))
1608udp UNCONN 0 0 192.168.1.2:123 0.0.0.0:* users:(("ntpd",pid=864,fd=27))
1609udp UNCONN 0 0 68.199.193.44:123 0.0.0.0:* users:(("ntpd",pid=864,fd=25))
1610udp UNCONN 0 0 68.199.193.42:123 0.0.0.0:* users:(("ntpd",pid=864,fd=24))
1611udp UNCONN 0 0 192.168.1.1:123 0.0.0.0:* users:(("ntpd",pid=864,fd=23))
1612udp UNCONN 0 0 127.0.0.1:123 0.0.0.0:* users:(("ntpd",pid=864,fd=18))
1613udp UNCONN 0 0 0.0.0.0:123 0.0.0.0:* users:(("ntpd",pid=864,fd=17))
1614udp UNCONN 0 0 192.168.1.255:137 0.0.0.0:* users:(("nmbd",pid=1389,fd=20))
1615udp UNCONN 0 0 192.168.1.100:137 0.0.0.0:* users:(("nmbd",pid=1389,fd=19))
1616udp UNCONN 0 0 0.0.0.0:137 0.0.0.0:* users:(("nmbd",pid=1389,fd=17))
1617udp UNCONN 0 0 192.168.1.255:138 0.0.0.0:* users:(("nmbd",pid=1389,fd=22))
1618udp UNCONN 0 0 192.168.1.100:138 0.0.0.0:* users:(("nmbd",pid=1389,fd=21))
1619udp UNCONN 0 0 0.0.0.0:138 0.0.0.0:* users:(("nmbd",pid=1389,fd=18))
1620udp UNCONN 0 0 0.0.0.0:161 0.0.0.0:* users:(("snmpd",pid=1361,fd=6))
1621udp UNCONN 0 0 127.0.0.1:500 0.0.0.0:* users:(("pluto",pid=14996,fd=31))
1622udp UNCONN 0 0 192.168.1.1:500 0.0.0.0:* users:(("pluto",pid=14996,fd=29))
1623udp UNCONN 0 0 192.168.6.1:500 0.0.0.0:* users:(("pluto",pid=14996,fd=27))
1624udp UNCONN 0 0 192.168.1.2:500 0.0.0.0:* users:(("pluto",pid=14996,fd=25))
1625udp UNCONN 0 0 192.168.1.100:500 0.0.0.0:* users:(("pluto",pid=14996,fd=23))
1626udp UNCONN 0 0 192.168.1.101:500 0.0.0.0:* users:(("pluto",pid=14996,fd=21))
1627udp UNCONN 0 0 68.199.193.42:500 0.0.0.0:* users:(("pluto",pid=14996,fd=19))
1628udp UNCONN 0 0 68.199.193.44:500 0.0.0.0:* users:(("pluto",pid=14996,fd=17))
1629udp UNCONN 0 0 192.168.122.1:500 0.0.0.0:* users:(("pluto",pid=14996,fd=15))
1630tcp LISTEN 0 100 192.168.1.100:995 0.0.0.0:* users:(("dovecot",pid=1577,fd=21))
1631tcp LISTEN 0 128 127.0.0.1:199 0.0.0.0:* users:(("snmpd",pid=1361,fd=7))
1632tcp LISTEN 0 80 192.168.1.100:3306 0.0.0.0:* users:(("mysqld",pid=1627,fd=29))
1633tcp LISTEN 0 100 0.0.0.0:587 0.0.0.0:* users:(("smtpd",pid=19393,fd=6),("smtpd",pid=15862,fd=6),("master",pid=2462,fd=20))
1634tcp LISTEN 0 50 127.0.0.1:139 0.0.0.0:* users:(("smbd",pid=1851,fd=36))
1635tcp LISTEN 0 50 192.168.1.100:139 0.0.0.0:* users:(("smbd",pid=1851,fd=34))
1636tcp LISTEN 0 1 127.0.0.1:5900 0.0.0.0:* users:(("qemu-system-x86",pid=3238,fd=20))
1637tcp LISTEN 0 10 192.168.1.2:5038 0.0.0.0:* users:(("asterisk",pid=1390,fd=9))
1638tcp LISTEN 0 128 0.0.0.0:111 0.0.0.0:* users:(("systemd",pid=1,fd=95))
1639tcp LISTEN 0 128 192.168.1.100:80 0.0.0.0:* users:(("/usr/sbin/httpd",pid=3786,fd=3),("/usr/sbin/httpd",pid=2803,fd=3),("/usr/sbin/httpd",pid=2802,fd=3),("/usr/sbin/httpd",pid=2800,fd=3),("/usr/sbin/httpd",pid=2797,fd=3),("/usr/sbin/httpd",pid=2073,fd=3))
1640tcp LISTEN 0 128 192.168.1.1:81 0.0.0.0:* users:(("darkstat",pid=1364,fd=9))
1641tcp LISTEN 0 32 192.168.122.1:53 0.0.0.0:* users:(("dnsmasq",pid=3207,fd=6))
1642tcp LISTEN 0 128 68.199.193.42:4949 0.0.0.0:* users:(("munin-node",pid=1726,fd=5))
1643tcp LISTEN 0 10 68.199.193.44:53 0.0.0.0:* users:(("named",pid=1511,fd=23))
1644tcp LISTEN 0 10 192.168.1.1:53 0.0.0.0:* users:(("named",pid=1511,fd=22))
1645tcp LISTEN 0 10 127.0.0.1:53 0.0.0.0:* users:(("named",pid=1511,fd=21))
1646tcp LISTEN 0 128 0.0.0.0:22 0.0.0.0:* users:(("sshd",pid=1355,fd=3))
1647tcp LISTEN 0 100 0.0.0.0:25 0.0.0.0:* users:(("smtpd",pid=19465,fd=6),("master",pid=2462,fd=13))
1648tcp LISTEN 0 128 127.0.0.1:953 0.0.0.0:* users:(("named",pid=1511,fd=24))
1649tcp LISTEN 0 128 68.199.193.44:443 0.0.0.0:* users:(("/usr/sbin/httpd",pid=3786,fd=4),("/usr/sbin/httpd",pid=2803,fd=4),("/usr/sbin/httpd",pid=2802,fd=4),("/usr/sbin/httpd",pid=2800,fd=4),("/usr/sbin/httpd",pid=2797,fd=4),("/usr/sbin/httpd",pid=2073,fd=4))
1650tcp LISTEN 0 128 127.0.0.1:8891 0.0.0.0:* users:(("opendkim",pid=2166,fd=3))
1651tcp LISTEN 0 50 127.0.0.1:445 0.0.0.0:* users:(("smbd",pid=1851,fd=35))
1652tcp LISTEN 0 50 192.168.1.100:445 0.0.0.0:* users:(("smbd",pid=1851,fd=33))
1653tcp LISTEN 0 128 127.0.0.1:8893 0.0.0.0:* users:(("opendmarc",pid=2151,fd=3))
1654tcp LISTEN 0 128 127.0.0.1:8125 0.0.0.0:* users:(("netdata",pid=1387,fd=16))
1655tcp LISTEN 0 128 68.199.193.42:19999 0.0.0.0:* users:(("netdata",pid=1387,fd=3))
1656tcp LISTEN 0 128 0.0.0.0:993 0.0.0.0:* users:(("imap-login",pid=3310,fd=7),("imap-login",pid=3309,fd=7),("imap-login",pid=3308,fd=7),("imap-login",pid=3307,fd=7),("imap-login",pid=3306,fd=7),("imap-login",pid=3305,fd=7),("imap-login",pid=3304,fd=7),("imap-login",pid=3303,fd=7),("imap-login",pid=3302,fd=7),("imap-login",pid=3300,fd=7),("imap-login",pid=3299,fd=7),("imap-login",pid=3298,fd=7),("imap-login",pid=3297,fd=7),("imap-login",pid=3296,fd=7),("imap-login",pid=3295,fd=7),("imap-login",pid=3294,fd=7),("imap-login",pid=3293,fd=7),("imap-login",pid=3292,fd=7),("imap-login",pid=3291,fd=7),("imap-login",pid=3288,fd=7),("dovecot",pid=1577,fd=35))
1657tcp LISTEN 0 5 0.0.0.0:5666 0.0.0.0:* users:(("nrpe",pid=2051,fd=4))
1658tcp TIME-WAIT 0 0 127.0.0.1:42084 127.0.0.1:8891
1659tcp TIME-WAIT 0 0 68.199.193.42:59524 64.1.16.5:25
1660tcp TIME-WAIT 0 0 127.0.0.1:50053 127.0.0.1:953
1661tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:45838 users:(("imap-login",pid=3304,fd=18))
1662tcp TIME-WAIT 0 0 192.168.1.100:80 192.168.1.7:40588
1663tcp TIME-WAIT 0 0 68.199.193.42:59696 64.1.16.5:25
1664tcp TIME-WAIT 0 0 68.199.193.42:44334 66.104.218.100:443
1665tcp TIME-WAIT 0 0 68.199.193.42:56150 64.1.16.3:25
1666tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:40036 users:(("imap-login",pid=3310,fd=15))
1667tcp ESTAB 0 0 192.168.1.1:22 192.168.1.7:43470 users:(("sshd",pid=952,fd=3),("sshd",pid=948,fd=3))
1668tcp ESTAB 0 0 68.199.193.42:57754 206.201.174.20:4949 users:(("/usr/share/muni",pid=20462,fd=7))
1669tcp TIME-WAIT 0 0 68.199.193.42:59512 64.1.16.5:25
1670tcp ESTAB 0 0 68.199.193.42:993 192.168.1.35:65073 users:(("imap-login",pid=3303,fd=22))
1671tcp TIME-WAIT 0 0 68.199.193.42:44450 66.104.218.100:443
1672tcp TIME-WAIT 0 0 68.199.193.42:58886 64.1.16.27:25
1673tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:45776 users:(("imap-login",pid=3305,fd=15))
1674tcp TIME-WAIT 0 0 68.199.193.42:25 64.1.16.3:53242
1675tcp TIME-WAIT 0 0 68.199.193.42:33816 64.1.16.1:4949
1676tcp ESTAB 0 0 68.199.193.42:54546 64.1.16.27:4949 users:(("/usr/share/muni",pid=20461,fd=7))
1677tcp TIME-WAIT 0 0 68.199.193.42:59572 64.1.16.5:25
1678tcp TIME-WAIT 0 0 68.199.193.42:44296 66.104.218.100:443
1679tcp TIME-WAIT 0 0 68.199.193.42:48665 65.22.197.1:53
1680tcp TIME-WAIT 0 0 68.199.193.42:56252 64.1.16.3:25
1681tcp TIME-WAIT 0 0 68.199.193.42:56274 64.1.16.3:25
1682tcp TIME-WAIT 0 0 192.168.1.100:80 192.168.1.7:40590
1683tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:40038 users:(("imap-login",pid=3309,fd=15))
1684tcp TIME-WAIT 0 0 68.199.193.42:38628 64.1.16.18:443
1685tcp TIME-WAIT 0 0 68.199.193.42:58860 64.1.16.27:25
1686tcp TIME-WAIT 0 0 68.199.193.42:44292 66.104.218.100:443
1687tcp TIME-WAIT 0 0 68.199.193.42:58896 64.1.16.27:25
1688tcp TIME-WAIT 0 0 68.199.193.42:44394 66.104.218.100:443
1689tcp TIME-WAIT 0 0 68.199.193.42:58908 64.1.16.27:25
1690tcp ESTAB 0 0 192.168.1.100:445 192.168.1.7:55374 users:(("smbd",pid=28138,fd=41))
1691tcp TIME-WAIT 0 0 68.199.193.42:59644 64.1.16.5:25
1692tcp ESTAB 0 0 127.0.0.1:8891 127.0.0.1:42236 users:(("opendkim",pid=2166,fd=5))
1693tcp TIME-WAIT 0 0 68.199.193.42:49326 64.1.16.3:4949
1694tcp TIME-WAIT 0 0 68.199.193.42:44462 66.104.218.100:443
1695tcp TIME-WAIT 0 0 68.199.193.42:56102 64.1.16.3:25
1696tcp TIME-WAIT 0 0 68.199.193.42:45776 64.1.16.4:4949
1697tcp SYN-SENT 0 1 68.199.193.42:42184 107.155.66.2:4949 users:(("/usr/share/muni",pid=20459,fd=7))
1698tcp TIME-WAIT 0 0 68.199.193.42:40422 68.199.193.42:4949
1699tcp TIME-WAIT 0 0 68.199.193.42:56186 64.1.16.3:25
1700tcp TIME-WAIT 0 0 68.199.193.42:44300 66.104.218.100:443
1701tcp ESTAB 0 0 127.0.0.1:42236 127.0.0.1:8891 users:(("smtpd",pid=15862,fd=13))
1702tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:45816 users:(("imap-login",pid=3303,fd=29))
1703tcp TIME-WAIT 0 0 68.199.193.42:59558 64.1.16.5:25
1704tcp TIME-WAIT 0 0 68.199.193.42:58788 64.1.16.27:25
1705tcp TIME-WAIT 0 0 127.0.0.1:34233 127.0.0.1:953
1706tcp TIME-WAIT 0 0 68.199.193.42:58970 64.1.16.27:25
1707tcp TIME-WAIT 0 0 68.199.193.42:59704 64.1.16.5:25
1708tcp TIME-WAIT 0 0 68.199.193.42:44358 66.104.218.100:443
1709tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:45810 users:(("imap-login",pid=3303,fd=27))
1710tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:45784 users:(("imap-login",pid=3308,fd=20))
1711tcp TIME-WAIT 0 0 68.199.193.42:59688 64.1.16.5:25
1712tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:45624 users:(("imap-login",pid=3303,fd=17))
1713tcp TIME-WAIT 0 0 68.199.193.42:58824 64.1.16.27:25
1714tcp TIME-WAIT 0 0 68.199.193.42:59536 64.1.16.5:25
1715tcp ESTAB 0 0 68.199.193.42:993 192.168.1.35:65252 users:(("imap-login",pid=3298,fd=16))
1716tcp TIME-WAIT 0 0 68.199.193.42:58848 64.1.16.27:25
1717tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:45774 users:(("imap-login",pid=3310,fd=16))
1718tcp TIME-WAIT 0 0 68.199.193.42:59620 64.1.16.5:25
1719tcp TIME-WAIT 0 0 68.199.193.42:58920 64.1.16.27:25
1720tcp TIME-WAIT 0 0 68.199.193.42:56282 64.1.16.3:25
1721tcp TIME-WAIT 0 0 68.199.193.44:587 185.211.245.170:17016
1722tcp TIME-WAIT 0 0 68.199.193.42:59608 64.1.16.5:25
1723tcp TIME-WAIT 0 0 68.199.193.42:59656 64.1.16.5:25
1724tcp TIME-WAIT 0 0 68.199.193.42:56178 64.1.16.3:25
1725tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:40042 users:(("imap-login",pid=3302,fd=15))
1726tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:40046 users:(("imap-login",pid=3296,fd=15))
1727tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:40738 users:(("imap-login",pid=3303,fd=16))
1728tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:45836 users:(("imap-login",pid=3298,fd=15))
1729tcp TIME-WAIT 0 0 68.199.193.42:56140 64.1.16.3:25
1730tcp TIME-WAIT 0 0 68.199.193.42:59548 64.1.16.5:25
1731tcp TIME-WAIT 0 0 68.199.193.42:44304 66.104.218.100:443
1732tcp TIME-WAIT 0 0 68.199.193.42:33826 64.1.16.20:4949
1733tcp TIME-WAIT 0 0 68.199.193.42:56090 64.1.16.3:25
1734tcp TIME-WAIT 0 0 68.199.193.42:38616 64.1.16.18:443
1735tcp TIME-WAIT 0 0 68.199.193.42:56244 64.1.16.3:25
1736tcp TIME-WAIT 0 0 68.199.193.42:44382 66.104.218.100:443
1737tcp TIME-WAIT 0 0 68.199.193.42:58954 64.1.16.27:25
1738tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:45780 users:(("imap-login",pid=3304,fd=15))
1739tcp TIME-WAIT 0 0 68.199.193.42:58978 64.1.16.27:25
1740tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:45840 users:(("imap-login",pid=3304,fd=20))
1741tcp TIME-WAIT 0 0 68.199.193.42:59674 64.1.16.5:25
1742tcp TIME-WAIT 0 0 68.199.193.42:59596 64.1.16.5:25
1743tcp TIME-WAIT 0 0 68.199.193.42:44288 66.104.218.100:443
1744tcp TIME-WAIT 0 0 68.199.193.42:38482 64.1.16.18:443
1745tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:45814 users:(("imap-login",pid=3308,fd=24))
1746tcp TIME-WAIT 0 0 68.199.193.44:587 185.211.245.170:1312
1747tcp ESTAB 0 0 68.199.193.42:993 192.168.1.35:49944 users:(("imap-login",pid=3303,fd=35))
1748tcp ESTAB 0 0 192.168.1.100:445 192.168.1.7:55376 users:(("smbd",pid=28140,fd=41))
1749tcp TIME-WAIT 0 0 192.168.1.1:57678 192.168.1.100:80
1750tcp ESTAB 0 0 68.199.193.44:587 185.211.245.170:62294 users:(("smtpd",pid=15862,fd=9))
1751tcp TIME-WAIT 0 0 68.199.193.42:44474 66.104.218.100:443
1752tcp ESTAB 0 0 192.168.1.1:22 192.168.1.7:43462 users:(("sshd",pid=32482,fd=3),("sshd",pid=32458,fd=3))
1753tcp TIME-WAIT 0 0 68.199.193.42:56126 64.1.16.3:25
1754tcp TIME-WAIT 0 0 68.199.193.42:58932 64.1.16.27:25
1755tcp TIME-WAIT 0 0 68.199.193.42:58872 64.1.16.27:25
1756tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:45808 users:(("imap-login",pid=3307,fd=16))
1757tcp TIME-WAIT 0 0 127.0.0.1:42000 127.0.0.1:8891
1758tcp TIME-WAIT 0 0 68.199.193.42:44282 66.104.218.100:443
1759tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:45782 users:(("imap-login",pid=3310,fd=22))
1760tcp TIME-WAIT 0 0 68.199.193.42:56162 64.1.16.3:25
1761tcp TIME-WAIT 0 0 68.199.193.42:44370 66.104.218.100:443
1762tcp ESTAB 0 0 68.199.193.42:47484 68.199.193.45:4949 users:(("/usr/share/muni",pid=20465,fd=7))
1763tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:40044 users:(("imap-login",pid=3303,fd=15))
1764tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:40040 users:(("imap-login",pid=3308,fd=15))
1765tcp TIME-WAIT 0 0 68.199.193.42:44438 66.104.218.100:443
1766tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:45786 users:(("imap-login",pid=3303,fd=25))
1767tcp TIME-WAIT 0 0 68.199.193.42:59682 64.1.16.5:25
1768tcp TIME-WAIT 0 0 68.199.193.42:56210 64.1.16.3:25
1769tcp TIME-WAIT 0 0 68.199.193.42:56114 64.1.16.3:25
1770tcp ESTAB 0 0 68.199.193.42:57496 64.1.16.5:4949 users:(("/usr/share/muni",pid=20464,fd=7))
1771tcp TIME-WAIT 0 0 68.199.193.42:58992 64.1.16.27:25
1772tcp TIME-WAIT 0 0 68.199.193.42:44426 66.104.218.100:443
1773tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:44680 users:(("imap-login",pid=3307,fd=15))
1774tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:45778 users:(("imap-login",pid=3303,fd=18))
1775tcp TIME-WAIT 0 0 68.199.193.42:59666 64.1.16.5:25
1776tcp TIME-WAIT 0 0 68.199.193.42:44346 66.104.218.100:443
1777tcp ESTAB 0 0 192.168.1.100:445 192.168.1.7:55372 users:(("smbd",pid=28139,fd=41))
1778tcp TIME-WAIT 0 0 68.199.193.42:44320 66.104.218.100:443
1779tcp TIME-WAIT 0 0 68.199.193.42:56266 64.1.16.3:25
1780tcp TIME-WAIT 0 0 68.199.193.42:56234 64.1.16.3:25
1781tcp TIME-WAIT 0 0 68.199.193.42:58800 64.1.16.27:25
1782tcp TIME-WAIT 0 0 68.199.193.42:58438 64.1.16.8:4949
1783tcp TIME-WAIT 0 0 68.199.193.42:56222 64.1.16.3:25
1784tcp TIME-WAIT 0 0 68.199.193.42:56260 64.1.16.3:25
1785tcp TIME-WAIT 0 0 68.199.193.42:59584 64.1.16.5:25
1786tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:44872 users:(("imap-login",pid=3310,fd=18))
1787tcp TIME-WAIT 0 0 68.199.193.42:58962 64.1.16.27:25
1788tcp TIME-WAIT 0 0 68.199.193.42:56080 64.1.16.3:25
1789tcp TIME-WAIT 0 0 68.199.193.42:58812 64.1.16.27:25
1790tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:45812 users:(("imap-login",pid=3296,fd=16))
1791tcp TIME-WAIT 0 0 68.199.193.42:58836 64.1.16.27:25
1792tcp TIME-WAIT 0 0 68.199.193.42:59498 64.1.16.5:25
1793tcp ESTAB 0 0 68.199.193.42:993 192.168.1.35:60474 users:(("imap-login",pid=3308,fd=16))
1794tcp TIME-WAIT 0 0 68.199.193.42:58944 64.1.16.27:25
1795tcp TIME-WAIT 0 0 68.199.193.42:59632 64.1.16.5:25
1796tcp ESTAB 0 0 192.168.1.100:445 192.168.1.7:55370 users:(("smbd",pid=28141,fd=41))
1797tcp ESTAB 0 0 68.199.193.42:46882 206.201.161.20:4949 users:(("/usr/share/muni",pid=20458,fd=7))
1798tcp TIME-WAIT 0 0 68.199.193.42:44308 66.104.218.100:443
1799tcp TIME-WAIT 0 0 68.199.193.42:53742 66.104.218.100:4949
1800tcp ESTAB 0 0 68.199.193.42:993 192.168.1.7:44678 users:(("imap-login",pid=3308,fd=18))
1801tcp TIME-WAIT 0 0 68.199.193.42:58984 64.1.16.27:25
1802tcp TIME-WAIT 0 0 68.199.193.42:56198 64.1.16.3:25
1803
1804Traffic Control
1805
1806Device lo:
1807qdisc noqueue 0: root refcnt 2
1808 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
1809 backlog 0b 0p requeues 0
1810
1811
1812Device eth0:
1813qdisc mq 0: root
1814 Sent 24373039827 bytes 57272213 pkt (dropped 0, overlimits 0 requeues 822)
1815 backlog 0b 0p requeues 822
1816qdisc fq_codel 0: parent :8 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn
1817 Sent 4546913198 bytes 7349837 pkt (dropped 0, overlimits 0 requeues 147)
1818 backlog 0b 0p requeues 147
1819 maxpacket 9036 drop_overlimit 0 new_flow_count 6113 ecn_mark 0
1820 new_flows_len 0 old_flows_len 0
1821qdisc fq_codel 0: parent :7 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn
1822 Sent 3360052282 bytes 15848577 pkt (dropped 0, overlimits 0 requeues 55)
1823 backlog 0b 0p requeues 55
1824 maxpacket 17212 drop_overlimit 0 new_flow_count 7331 ecn_mark 0
1825 new_flows_len 0 old_flows_len 0
1826qdisc fq_codel 0: parent :6 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn
1827 Sent 2907261722 bytes 6892318 pkt (dropped 0, overlimits 0 requeues 73)
1828 backlog 0b 0p requeues 73
1829 maxpacket 17212 drop_overlimit 0 new_flow_count 4720 ecn_mark 0
1830 new_flows_len 0 old_flows_len 0
1831qdisc fq_codel 0: parent :5 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn
1832 Sent 3135099498 bytes 5985323 pkt (dropped 0, overlimits 0 requeues 114)
1833 backlog 0b 0p requeues 114
1834 maxpacket 17212 drop_overlimit 0 new_flow_count 5530 ecn_mark 0
1835 new_flows_len 0 old_flows_len 0
1836qdisc fq_codel 0: parent :4 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn
1837 Sent 2348621405 bytes 4474780 pkt (dropped 0, overlimits 0 requeues 102)
1838 backlog 0b 0p requeues 102
1839 maxpacket 12148 drop_overlimit 0 new_flow_count 3969 ecn_mark 0
1840 new_flows_len 0 old_flows_len 0
1841qdisc fq_codel 0: parent :3 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn
1842 Sent 3224922302 bytes 6643459 pkt (dropped 0, overlimits 0 requeues 92)
1843 backlog 0b 0p requeues 92
1844 maxpacket 17212 drop_overlimit 0 new_flow_count 4459 ecn_mark 0
1845 new_flows_len 0 old_flows_len 0
1846qdisc fq_codel 0: parent :2 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn
1847 Sent 3439145738 bytes 5676537 pkt (dropped 0, overlimits 0 requeues 147)
1848 backlog 0b 0p requeues 147
1849 maxpacket 12112 drop_overlimit 0 new_flow_count 5323 ecn_mark 0
1850 new_flows_len 0 old_flows_len 0
1851qdisc fq_codel 0: parent :1 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn
1852 Sent 1411023682 bytes 4401382 pkt (dropped 0, overlimits 0 requeues 92)
1853 backlog 0b 0p requeues 92
1854 maxpacket 17212 drop_overlimit 0 new_flow_count 3488 ecn_mark 0
1855 new_flows_len 0 old_flows_len 0
1856
1857class mq :1 root
1858 Sent 1411023682 bytes 4401382 pkt (dropped 0, overlimits 0 requeues 92)
1859 backlog 0b 0p requeues 92
1860class mq :2 root
1861 Sent 3439145738 bytes 5676537 pkt (dropped 0, overlimits 0 requeues 147)
1862 backlog 0b 0p requeues 147
1863class mq :3 root
1864 Sent 3224922302 bytes 6643459 pkt (dropped 0, overlimits 0 requeues 92)
1865 backlog 0b 0p requeues 92
1866class mq :4 root
1867 Sent 2348621551 bytes 4474782 pkt (dropped 0, overlimits 0 requeues 102)
1868 backlog 0b 0p requeues 102
1869class mq :5 root
1870 Sent 3135099498 bytes 5985323 pkt (dropped 0, overlimits 0 requeues 114)
1871 backlog 0b 0p requeues 114
1872class mq :6 root
1873 Sent 2907261722 bytes 6892318 pkt (dropped 0, overlimits 0 requeues 73)
1874 backlog 0b 0p requeues 73
1875class mq :7 root
1876 Sent 3360052282 bytes 15848577 pkt (dropped 0, overlimits 0 requeues 55)
1877 backlog 0b 0p requeues 55
1878class mq :8 root
1879 Sent 4546913198 bytes 7349837 pkt (dropped 0, overlimits 0 requeues 147)
1880 backlog 0b 0p requeues 147
1881
1882Device eth1:
1883qdisc mq 0: root
1884 Sent 88375597034 bytes 75338485 pkt (dropped 0, overlimits 0 requeues 1952)
1885 backlog 0b 0p requeues 1952
1886qdisc fq_codel 0: parent :8 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn
1887 Sent 9895602585 bytes 8449354 pkt (dropped 0, overlimits 0 requeues 81)
1888 backlog 0b 0p requeues 81
1889 maxpacket 15140 drop_overlimit 0 new_flow_count 3064 ecn_mark 0
1890 new_flows_len 0 old_flows_len 0
1891qdisc fq_codel 0: parent :7 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn
1892 Sent 5461577273 bytes 6729754 pkt (dropped 0, overlimits 0 requeues 78)
1893 backlog 0b 0p requeues 78
1894 maxpacket 22710 drop_overlimit 0 new_flow_count 3204 ecn_mark 0
1895 new_flows_len 0 old_flows_len 0
1896qdisc fq_codel 0: parent :6 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn
1897 Sent 4779725647 bytes 5185683 pkt (dropped 0, overlimits 0 requeues 713)
1898 backlog 0b 0p requeues 713
1899 maxpacket 68130 drop_overlimit 0 new_flow_count 3419 ecn_mark 0
1900 new_flows_len 0 old_flows_len 0
1901qdisc fq_codel 0: parent :5 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn
1902 Sent 24445808398 bytes 18626114 pkt (dropped 0, overlimits 0 requeues 279)
1903 backlog 0b 0p requeues 279
1904 maxpacket 68130 drop_overlimit 0 new_flow_count 4403 ecn_mark 0
1905 new_flows_len 0 old_flows_len 0
1906qdisc fq_codel 0: parent :4 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn
1907 Sent 5872787879 bytes 6327092 pkt (dropped 0, overlimits 0 requeues 464)
1908 backlog 0b 0p requeues 464
1909 maxpacket 66616 drop_overlimit 0 new_flow_count 3129 ecn_mark 0
1910 new_flows_len 0 old_flows_len 0
1911qdisc fq_codel 0: parent :3 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn
1912 Sent 10641414838 bytes 8582470 pkt (dropped 0, overlimits 0 requeues 124)
1913 backlog 0b 0p requeues 124
1914 maxpacket 30280 drop_overlimit 0 new_flow_count 2929 ecn_mark 0
1915 new_flows_len 0 old_flows_len 0
1916qdisc fq_codel 0: parent :2 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn
1917 Sent 21238561404 bytes 15598742 pkt (dropped 0, overlimits 0 requeues 135)
1918 backlog 0b 0p requeues 135
1919 maxpacket 66616 drop_overlimit 0 new_flow_count 3026 ecn_mark 0
1920 new_flows_len 0 old_flows_len 0
1921qdisc fq_codel 0: parent :1 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn
1922 Sent 6040119010 bytes 5839276 pkt (dropped 0, overlimits 0 requeues 78)
1923 backlog 0b 0p requeues 78
1924 maxpacket 22710 drop_overlimit 0 new_flow_count 3043 ecn_mark 0
1925 new_flows_len 0 old_flows_len 0
1926
1927class mq :1 root
1928 Sent 6040119010 bytes 5839276 pkt (dropped 0, overlimits 0 requeues 78)
1929 backlog 0b 0p requeues 78
1930class mq :2 root
1931 Sent 21238561404 bytes 15598742 pkt (dropped 0, overlimits 0 requeues 135)
1932 backlog 0b 0p requeues 135
1933class mq :3 root
1934 Sent 10641416352 bytes 8582471 pkt (dropped 0, overlimits 0 requeues 124)
1935 backlog 0b 0p requeues 124
1936class mq :4 root
1937 Sent 5872787879 bytes 6327092 pkt (dropped 0, overlimits 0 requeues 464)
1938 backlog 0b 0p requeues 464
1939class mq :5 root
1940 Sent 24445808398 bytes 18626114 pkt (dropped 0, overlimits 0 requeues 279)
1941 backlog 0b 0p requeues 279
1942class mq :6 root
1943 Sent 4779725647 bytes 5185683 pkt (dropped 0, overlimits 0 requeues 713)
1944 backlog 0b 0p requeues 713
1945class mq :7 root
1946 Sent 5461577273 bytes 6729754 pkt (dropped 0, overlimits 0 requeues 78)
1947 backlog 0b 0p requeues 78
1948class mq :8 root
1949 Sent 9895602585 bytes 8449354 pkt (dropped 0, overlimits 0 requeues 81)
1950 backlog 0b 0p requeues 81
1951
1952Device br0:
1953qdisc noqueue 0: root refcnt 2
1954 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
1955 backlog 0b 0p requeues 0
1956
1957
1958Device virbr0:
1959qdisc noqueue 0: root refcnt 2
1960 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
1961 backlog 0b 0p requeues 0
1962
1963
1964Device virbr0-nic:
1965qdisc fq_codel 0: root refcnt 2 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn
1966 Sent 180 bytes 2 pkt (dropped 0, overlimits 0 requeues 0)
1967 backlog 0b 0p requeues 0
1968 maxpacket 0 drop_overlimit 0 new_flow_count 0 ecn_mark 0
1969 new_flows_len 0 old_flows_len 0
1970
1971
1972Device vnet0:
1973qdisc fq_codel 0: root refcnt 2 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 32Mb ecn
1974 Sent 262777389 bytes 516724 pkt (dropped 0, overlimits 0 requeues 0)
1975 backlog 0b 0p requeues 0
1976 maxpacket 7570 drop_overlimit 0 new_flow_count 356 ecn_mark 0
1977 new_flows_len 0 old_flows_len 0
1978
1979
1980
1981TC Filters
1982
1983Device lo:
1984
1985Device eth0:
1986
1987Device eth1:
1988
1989Device br0:
1990
1991Device virbr0:
1992
1993Device virbr0-nic:
1994
1995Device vnet0: