[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: PS/2 can't get through firewall/nat



I just tried it and still no-workie.

-Scott


On Sat, 31 Aug 2002, Shawn T. Carroll wrote:

> Well how 'bout a "keep state" so the UDP packets can get back?
>
> -Shawn
>
> On Fri, 30 Aug 2002, J. Scott Edwards wrote:
>
> >I have found out that when the Playstation is playing the game it uses UDP
> >packets and I believe that is why the firewall is rejecting them.  I tried
> >to open up port 10075 by adding the following line to my pf.conf, but it
> >still doesn't work:
> >
> >pass in quick on $ext_if proto udp from any to any port 10075
> >
> >I also tried this since the port for the destination seems to always be a
> >50000 or 60000 number:
> >
> >pass in quick on $ext_if proto udp from any to any port > 32767
> >
> >But that doesn't work either.  I know I'm just doing something stupid, can
> >anyone offer a suggestion?
> >
> >Thanks
> >  -Scott
> >
> >
> >
> >>
> >> I have included the files at the end.  I'm not sure that the pflog
> >> contains the actual attempts that failed or not, because they look like
> >> port 10075 which is the server port I believe.
> >>
> >>
> >> On Mon, 26 Aug 2002, David S. wrote:
> >>
> >> > > I am using 3.1 as a firewall and nat for my home network through a cable
> >> > > modem and it has worked great for everything so far.  However I have just
> >> > > run into a snag trying to play a Playstation 2 online game.  It works fine
> >> > > talking to the Sony server and signing on, getting the games lists and
> >> > > all of that junk, but when I try to actually join the game it fails.  I'm
> >> > > pretty sure that the reason it fails is because for game play it sends the
> >> > > packets peer-to-peer.  And I'm guessing that the nat is mapping the ports
> >> > > to a different port number?  Does anybody have any suggestions on how I
> >> > > can work around this?
> >> >
> >> > Provide more information, like
> >> >
> >> > 	nat rules
> >> > 	pf rules
> >> > 	pflog records of the failed connection attempts
> >> >
> >> > David S.
> >> >
> >> >
> >>
> >>
> >>
> >> #	$OpenBSD: nat.conf,v 1.4 2001/07/09 23:20:46 millert Exp $
> >> #
> >> # See nat.conf(5) for syntax and examples
> >> #
> >> # replace ext0 with external interface name, 10.0.0.0/8 with internal network
> >> # and 192.168.1.1 with external address
> >> #
> >> # nat: packets going out through ext0 with source address 10.0.0.0/8 will get
> >> # translated as coming from 192.168.1.1. a state is created for such packets,
> >> # and incoming packets will be redirected to the internal address.
> >>
> >> nat on xl1 from 192.168.0.0/24 to any -> xl1
> >>
> >> # rdr: packets coming in through ext0 with destination 192.168.1.1:1234 will
> >> # be redirected to 10.1.1.1:5678. a state is created for such packets, and
> >> # outgoing packets will be translated as coming from the external address.
> >>
> >> # rdr on ext0 proto tcp from any to 192.168.1.1/32 port 1234 -> 10.1.1.1 port 5678
> >>
> >> rdr on xl1 proto tcp from any to XX.XXX.XXX.XXX/32 port 25 -> 192.168.0.1 port 25
> >>
> >>
> >>
> >>
> >>
> >> # The external interface is kue0 (157.161.48.183, the only routable address)
> >> # and the private network is 10.0.0.0/8, for which we are doing NAT.
> >>
> >> # use a macro for the interface name, so it can be changed easily
> >> ext_if = "xl1"
> >>
> >> # normalize all incoming traffic
> >> scrub in on $ext_if all
> >>
> >> # block and log everything by default
> >> block             out log on $ext_if           all
> >> block             in  log on $ext_if           all
> >> block return-rst  out log on $ext_if proto tcp all
> >> block return-rst  in  log on $ext_if proto tcp all
> >> block return-icmp out log on $ext_if proto udp all
> >> block return-icmp in  log on $ext_if proto udp all
> >>
> >> # block and log outgoing packets that don't have our address as source,
> >> # they are either spoofed or something is misconfigured (NAT disabled,
> >> # for instance), we want to be nice and don't send out garbage.
> >> #block out log quick on $ext_if from ! 157.161.48.183 to any
> >>
> >> # silently drop broadcasts (cable modem noise)
> >> block in quick on $ext_if from any to 255.255.255.255
> >>
> >> # block and log incoming packets from reserved address space and invalid
> >> # addresses, they are either spoofed or misconfigured, we can't reply to
> >> # them anyway (hence, no return-rst).
> >> block in log quick on $ext_if from { 10.0.0.0/8, 172.16.0.0/12, \
> >>              192.168.0.0/16, 255.255.255.255/32 } to any
> >>
> >> # ICMP
> >>
> >> # pass out/in certain ICMP queries and keep state (ping)
> >> # state matching is done on host addresses and ICMP id (not type/code),
> >> # so replies (like 0/0 for 8/0) will match queries
> >> # ICMP error messages (which always refer to a TCP/UDP packet) are
> >> # handled by the TCP/UDP states
> >> pass out on $ext_if inet proto icmp all icmp-type 8 code 0 keep state
> >> pass in  on $ext_if inet proto icmp all icmp-type 8 code 0 keep state
> >>
> >> # UDP
> >>
> >> # pass out all UDP connections and keep state
> >> pass out on $ext_if proto udp all keep state
> >>
> >> # pass in certain UDP connections and keep state (DNS)
> >> pass in on $ext_if proto udp from any to any port = domain keep state
> >>
> >> # TCP
> >>
> >> # pass out all TCP connections and modulate state
> >> pass out on $ext_if proto tcp all modulate state
> >>
> >> # pass in certain TCP connections and keep state (SSH, SMTP, DNS, IDENT)
> >> pass in on $ext_if proto tcp from any to any port { ssh, smtp, domain, \
> >>              auth } keep state
> >>
> >>
> >>
> >> :::::::::::::::::
> >> pflog
> >> :::::::::::::::::
> >>
> >> 17:17:57.030585 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 17:20:57.040097 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 17:23:57.049733 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 17:24:14.222555 12-254-48-152.client.attbi.com.4241 > XX-XXX-XXX-XXX.client.attbi.com.www: S 399698337:399698337(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
> >> 17:24:14.947881 12-254-48-152.client.attbi.com.4241 > XX-XXX-XXX-XXX.client.attbi.com.www: S 399698337:399698337(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
> >> 17:24:15.542184 12-254-48-152.client.attbi.com.4241 > XX-XXX-XXX-XXX.client.attbi.com.www: S 399698337:399698337(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
> >> 17:26:57.059606 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 17:29:57.069452 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 17:32:57.079280 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 17:35:57.089109 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 17:38:57.098919 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 17:41:57.108737 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 17:44:57.118521 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 17:47:57.128304 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 17:50:57.138090 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 17:53:57.147854 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 17:56:57.157694 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 17:59:57.169498 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 18:02:57.181185 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 18:05:57.192782 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 18:08:57.204287 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 18:11:57.215728 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 18:14:57.226051 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 18:17:57.234562 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 18:20:57.243125 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 18:23:57.251727 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 18:25:45.583498 12-254-48-152.client.attbi.com.3140 > XX-XXX-XXX-XXX.client.attbi.com.www: S 1562561882:1562561882(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
> >> 18:25:46.275738 12-254-48-152.client.attbi.com.3140 > XX-XXX-XXX-XXX.client.attbi.com.www: S 1562561882:1562561882(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
> >> 18:25:47.068277 12-254-48-152.client.attbi.com.3140 > XX-XXX-XXX-XXX.client.attbi.com.www: S 1562561882:1562561882(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
> >> 18:26:57.260366 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 18:29:57.269049 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 18:32:57.277197 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 18:35:57.285116 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 18:38:57.293118 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 18:41:57.301186 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 18:44:57.309309 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 18:47:57.317491 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 18:50:57.325743 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 18:53:57.334028 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 18:56:57.342381 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 18:59:57.350792 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 19:02:57.359232 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 19:03:08.838685 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:09.146765 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:09.472905 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:09.785997 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:10.104876 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:10.421828 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:10.729815 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:11.048713 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:11.366039 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:11.683936 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:12.001881 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:12.323309 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:12.625103 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:12.939269 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:13.257408 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:13.568926 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:13.886540 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:14.201403 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:14.519769 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:14.844251 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:15.153357 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:15.470383 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:15.788144 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:16.109794 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:16.427193 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:16.739470 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:17.043969 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:17.361872 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:17.673104 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:17.987502 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:18.312116 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:18.630212 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:18.953595 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:19.265949 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:19.581564 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:19.900093 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:20.213510 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:20.525081 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:20.842829 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:21.158471 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:21.475464 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:21.800884 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:22.118566 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:22.426375 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:22.750680 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:23.069046 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:23.383817 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:23.695335 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:24.013159 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:24.327720 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:24.653433 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:25.086324 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:25.398408 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:25.718850 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:26.037203 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:26.354858 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:26.663100 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:26.981208 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:27.302243 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:27.623552 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:27.938103 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:28.253125 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:28.564191 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:28.882203 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:29.200368 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:29.522376 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:29.843157 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:30.151212 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:30.469325 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:30.790330 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:31.108532 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:31.420927 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:31.741212 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:32.052230 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:32.370371 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:32.691964 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:33.010395 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:33.328072 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:33.642245 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:33.960379 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:34.278222 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:34.593279 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:34.904578 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:35.222532 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:35.544052 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:35.861842 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:36.179819 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:36.499184 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:36.815856 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:37.125056 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:37.441829 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:37.756449 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:38.074549 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:38.392567 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:38.713678 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:39.031804 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:39.350029 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:39.668126 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:39.979295 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:40.294170 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:40.612193 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:03:40.933422 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:05.945736 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:06.260639 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:06.579918 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:06.893594 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:07.204382 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:07.530699 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:07.844396 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:08.162211 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:08.480350 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:08.788357 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:09.105802 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:09.423942 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:09.745471 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:10.063626 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:10.383037 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:10.699271 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:11.007661 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:11.332269 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:11.650021 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:11.968085 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:12.284352 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:12.593780 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:12.912143 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:13.233859 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:13.551864 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:13.869058 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:14.183994 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:14.503045 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:14.819847 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:15.135374 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:15.452688 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:15.770701 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:16.079173 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:16.404027 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:16.721319 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:17.035960 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:17.354132 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:17.672413 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:17.985129 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:18.304606 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:18.622672 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:18.941212 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:19.259086 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:19.566573 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:19.891495 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:20.199481 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:20.518125 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:20.835375 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:21.156675 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:21.468074 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:21.786777 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:22.128082 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:22.436708 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:22.754231 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:23.075002 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:23.392703 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:23.711068 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:24.029840 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:24.340751 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:24.655192 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:24.972630 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:25.290885 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:25.619664 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:25.923993 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:26.249195 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:26.562649 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:26.874249 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:27.192229 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:27.515332 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:27.832121 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:28.149343 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:28.464192 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:28.784297 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:29.100089 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:29.418433 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:29.726012 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:30.052308 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:30.369432 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:30.683816 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:30.995190 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:31.312958 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:31.634692 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:31.945950 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:32.263870 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:32.585439 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:32.906577 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:33.221041 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:33.538942 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:33.853738 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:34.164979 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:34.489857 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:34.807698 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:35.115915 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:35.433857 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:35.754927 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:36.073083 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:36.384558 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:36.704663 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:37.020939 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:37.341605 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:37.656761 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:04:37.975770 adsl-66-121-154-250.dsl.snfc21.pacbell.net.10075 > XX-XXX-XXX-XXX.client.attbi.com.56212:  udp 22
> >> 19:05:57.368177 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 19:08:57.378302 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 19:11:57.388823 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 19:14:57.398472 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 19:17:57.408524 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 19:20:57.418549 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 19:23:57.429269 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 19:26:57.440457 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 19:29:57.451588 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 19:32:57.462654 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 19:35:57.473639 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 19:37:36.248676 211.108.72.231.3280 > XX-XXX-XXX-XXX.client.attbi.com.1433: S 2342336890:2342336890(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
> >> 19:37:37.155096 211.108.72.231.3280 > XX-XXX-XXX-XXX.client.attbi.com.1433: S 2342336890:2342336890(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
> >> 19:37:38.156759 211.108.72.231.3280 > XX-XXX-XXX-XXX.client.attbi.com.1433: S 2342336890:2342336890(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
> >> 19:38:57.484579 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 19:41:57.495456 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 19:44:57.506263 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 19:47:57.517021 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 19:50:57.527741 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 19:52:41.660773 12-254-46-85.client.attbi.com.1113 > XX-XXX-XXX-XXX.client.attbi.com.www: S 840922125:840922125(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
> >> 19:52:42.267677 12-254-46-85.client.attbi.com.1113 > XX-XXX-XXX-XXX.client.attbi.com.www: S 840922125:840922125(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
> >> 19:52:43.054537 12-254-46-85.client.attbi.com.1113 > XX-XXX-XXX-XXX.client.attbi.com.www: S 840922125:840922125(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
> >> 19:53:57.538400 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 19:56:57.548829 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 19:59:57.558599 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 20:02:57.568357 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 20:05:51.342276 12-254-169-138.client.attbi.com.4391 > XX-XXX-XXX-XXX.client.attbi.com.www: S 1486497870:1486497870(0) win 16384 <mss 1460,nop,nop,sackOK> (DF) [tos 0x80]
> >> 20:05:57.578108 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >> 20:08:57.587847 192.168.100.1 > ALL-SYSTEMS.MCAST.NET: igmp query [tos 0xc0] [ttl 1]
> >
>
> Shawn T. Carroll, CCNA
> Distributed Systems Analyst
> Alltel Information Services
> Chittenden Bank Data Center
> Burlington, VT
> 802 660 7812
>
> --