29 May
2017
29 May
'17
2:49 p.m.
I get the following error in the statistic file of amprgate
5.29.18.144 169.228.66.251 4122 [19] dropped: non-44 inner source address
when i look on the PCAP file here is what I see
#1 0.000000 169.228.66.251 -> 192.168.1.180 IPv4 20
#2 9.996091 169.228.66.251 -> 192.168.1.180 IPv4 20
#3 19.997040 169.228.66.251 -> 192.168.1.180 IPv4 20
#4 29.996386 169.228.66.251 -> 192.168.1.180 IPv4 20
#5 39.995885 169.228.66.251 -> 192.168.1.180 IPv4 20
#6 49.997226 169.228.66.251 -> 192.168.1.180 IPv4 20
#7 59.996845 169.228.66.251 -> 192.168.1.180 IPv4 20
#8 69.996284 169.228.66.251 -> 192.168.1.180 IPv4 20
#9 79.996422 169.228.66.251 -> 192.168.1.180 IPv4 20
#10 90.006277 169.228.66.251 -> 192.168.1.180 IPv4 20
#11 99.996794 169.228.66.251 -> 192.168.1.180 IPv4 20
#12 109.996173 169.228.66.251 -> 192.168.1.180 IPv4 20
#13 120.008209 169.228.66.251 -> 192.168.1.180 IPv4 20
#14 129.997756 169.228.66.251 -> 192.168.1.180 IPv4 20
#15 139.996572 169.228.66.251 -> 192.168.1.180 IPv4 20
inside the PCAP here is what I see
Frame 1: 20 bytes on wire (160 bits), 20 bytes captured (160 bits)
Encapsulation type: Raw IP (7)
Arrival Time: May 29, 2017 08:59:04.652285000 CEST
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1496041144.652285000 seconds
[Time delta from previous captured frame: 0.000000000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 0.000000000 seconds]
Frame Number: 1
Frame Length: 20 bytes (160 bits)
Capture Length: 20 bytes (160 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: raw:ip]
Raw packet data
Internet Protocol Version 4, Src: 169.228.66.251, Dst: 192.168.1.180
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 20
Identification: 0x0000 (0)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: IPIP (4)
Header checksum: 0x0caa [validation disabled]
[Good: False]
[Bad: False]
Source: 169.228.66.251
Destination: 192.168.1.180
[Source GeoIP: La Jolla, CA, United States, AS7377 University of California, San Diego,
32.880699, -117.235901]
[Source GeoIP City: La Jolla, CA]
[Source GeoIP Country: United States]
[Source GeoIP AS Number: AS7377 University of California, San Diego]
[Source GeoIP Latitude: 32.880699]
[Source GeoIP Longitude: -117.235901]
[Destination GeoIP: Unknown]
Collapse Tree
I dont understand what is the problem
May anyone help ?
Thank Forward
Ronen - 4Z4ZQ