Код: Выделить всё
*Mar 1 06:37:39.604: IP: tableid=0, s=87.117.23.25 (local), d=87.117.23.29 (FastEthernet0/0), routed via FIB
*Mar 1 06:37:39.608: IP: s=87.117.23.25 (local), d=87.117.23.29 (FastEthernet0/0), len 97, sending
*Mar 1 06:37:39.608: TCP src=23, dst=3637, seq=110858086, ack=1945190730, win=4042 ACK PSH
*Mar 1 06:37:39.608: IP: tableid=0, s=87.117.23.29 (FastEthernet0/0), d=87.117.23.25 (FastEthernet0/0), routed via RIB
*Mar 1 06:37:39.608: IP: s=87.117.23.29 (FastEthernet0/0), d=87.117.23.25 (FastEthernet0/0), len 40, rcvd 3
*Mar 1 06:37:39.608: TCP src=3637, dst=23, seq=1945190730, ack=110858143, win=65173 ACK
*Mar 1 06:37:48.078: IP: tableid=0, s=87.117.23.29 (FastEthernet0/0), d=173.194.32.240 (Dialer1), routed via RIB
*Mar 1 06:37:48.078: IP: s=87.117.23.29 (FastEthernet0/0), d=173.194.32.240 (Dialer1), g=173.194.32.240, len 48, forward
*Mar 1 06:37:48.078: TCP src=3638, dst=80, seq=2834156386, ack=0, win=65535 SYN
*Mar 1 06:37:48.082: IP: tableid=0, s=87.117.23.29 (FastEthernet0/0), d=173.194.32.240 (Dialer1), routed via RIB
*Mar 1 06:37:48.082: IP: s=87.117.23.29 (FastEthernet0/0), d=173.194.32.240 (Dialer1), g=173.194.32.240, len 40, forward
*Mar 1 06:37:48.082: TCP src=3423, dst=80, seq=3629302726, ack=3694285632,win=0 ACK RST
*Mar 1 06:37:48.134: IP: tableid=0, s=87.117.23.29 (FastEthernet0/0), d=87.250.251.91 (Dialer1), routed via RIB
*Mar 1 06:37:48.138: IP: s=87.117.23.29 (FastEthernet0/0), d=87.250.251.91 (Dialer1), g=87.250.251.91, len 40, forward
*Mar 1 06:37:48.138: TCP src=3473, dst=80, seq=1699784931, ack=3848160464,win=0 ACK RST
*Mar 1 06:39:58.323: IP: tableid=0, s=87.117.23.29 (FastEthernet0/0), d=80.254.111.254 (Dialer1), routed via RIB
*Mar 1 06:39:58.323: IP: s=87.117.23.29 (FastEthernet0/0), d=80.254.111.254 (Dialer1), g=80.254.111.254, len 64, forward
*Mar 1 06:39:58.323: UDP src=58667, dst=53
*Mar 1 06:40:09.818: IP: tableid=0, s=118.169.54.160 (Dialer1), d=87.117.23.27(FastEthernet0/0), routed via RIB
*Mar 1 06:40:09.818: IP: s=118.169.54.160 (Dialer1), d=87.117.23.27 (FastEthernet0/0), g=87.117.23.27, len 48, forward
*Mar 1 06:40:09.818: TCP src=2613, dst=445, seq=180271794, ack=0, win=65535 SYN
*Mar 1 06:40:09.818: IP: s=118.169.54.160 (Dialer1), d=87.117.23.27 (FastEthernet0/0), len 48, encapsulation failed
*Mar 1 06:40:09.822: TCP src=2613, dst=445, seq=180271794, ack=0, win=65535 SYN
*Mar 1 06:40:12.851: IP: tableid=0, s=118.169.54.160 (Dialer1), d=87.117.23.27(FastEthernet0/0), routed via RIB
*Mar 1 06:40:12.851: IP: s=118.169.54.160 (Dialer1), d=87.117.23.27 (FastEthernet0/0), g=87.117.23.27, len 48, forward
*Mar 1 06:40:12.851: TCP src=2613, dst=445, seq=180271794, ack=0, win=65535 SYN
*Mar 1 06:40:12.851: IP: s=118.169.54.160 (Dialer1), d=87.117.23.27 (FastEthernet0/0), len 48, encapsulation failed
*Mar 1 06:40:12.851: TCP src=2613, dst=445, seq=180271794, ack=0, win=65535 SYN
*Mar 1 06:40:18.865: IP: tableid=0, s=118.169.54.160 (Dialer1), d=87.117.23.27(FastEthernet0/0), routed via RIB
*Mar 1 06:40:18.865: IP: s=118.169.54.160 (Dialer1), d=87.117.23.27 (FastEthernet0/0), g=87.117.23.27, len 48, forward
*Mar 1 06:40:18.869: TCP src=2613, dst=445, seq=180271794, ack=0, win=65535 SYN
*Mar 1 06:40:18.869: IP: s=118.169.54.160 (Dialer1), d=87.117.23.27 (FastEthernet0/0), len 48, encapsulation failed
*Mar 1 06:40:18.869: TCP src=2613, dst=445, seq=180271794, ack=0, win=65535 SYN
*Mar 1 06:40:40.052: IP: tableid=0, s=95.37.251.162 (Dialer1), d=87.117.23.30 (FastEthernet0/0), routed via RIB
*Mar 1 06:40:40.052: IP: s=95.37.251.162 (Dialer1), d=87.117.23.30 (FastEthernet0/0), g=87.117.23.30, len 48, forward
*Mar 1 06:40:40.052: TCP src=1736, dst=445, seq=2620518294, ack=0, win=49152 SYN
*Mar 1 06:40:40.052: IP: s=95.37.251.162 (Dialer1), d=87.117.23.30 (FastEthernet0/0), len 48, encapsulation failed
*Mar 1 06:40:40.052: TCP src=1736, dst=445, seq=2620518294, ack=0, win=49152 SYN
*Mar 1 06:40:43.057: IP: tableid=0, s=95.37.251.162 (Dialer1), d=87.117.23.30 (FastEthernet0/0), routed via RIB
*Mar 1 06:40:43.057: IP: s=95.37.251.162 (Dialer1), d=87.117.23.30 (FastEthernet0/0), g=87.117.23.30, len 48, forward
*Mar 1 06:40:43.057: TCP src=1736, dst=445, seq=2620518294, ack=0, win=49152 SYN
*Mar 1 06:40:43.057: IP: s=95.37.251.162 (Dialer1), d=87.117.23.30 (FastEthernet0/0), len 48, encapsulation failed
*Mar 1 06:40:43.057: TCP src=1736, dst=445, seq=2620518294, ack=0, win=49152 SYN
*Mar 1 06:41:49.914: IP: tableid=0, s=27.254.41.163 (Dialer1), d=87.117.23.27 (FastEthernet0/0), routed via RIB
*Mar 1 06:41:49.914: IP: s=27.254.41.163 (Dialer1), d=87.117.23.27 (FastEthernet0/0), g=87.117.23.27, len 44, forward
*Mar 1 06:41:49.914: TCP src=2928, dst=3072, seq=3688442184, ack=3966057799, win=5840 ACK SYN
*Mar 1 06:41:49.914: IP: s=27.254.41.163 (Dialer1), d=87.117.23.27 (FastEthernet0/0), len 44, encapsulation failed
*Mar 1 06:41:49.914: TCP src=2928, dst=3072, seq=3688442184, ack=3966057799, win=5840 ACK SYN
*Mar 1 06:42:06.538: IP: tableid=0, s=213.133.21.52 (Dialer1), d=87.117.23.27 (FastEthernet0/0), routed via RIB
*Mar 1 06:42:06.538: IP: s=213.133.21.52 (Dialer1), d=87.117.23.27 (FastEthernet0/0), g=87.117.23.27, len 48, forward
*Mar 1 06:42:06.538: TCP src=15265, dst=445, seq=1792022753, ack=0, win=65535 SYN
*Mar 1 06:42:06.538: IP: s=213.133.21.52 (Dialer1), d=87.117.23.27 (FastEthernet0/0), len 48, encapsulation failed
*Mar 1 06:42:06.538: TCP src=15265, dst=445, seq=1792022753, ack=0, win=65535 SYN
*Mar 1 06:42:08.116: IP: tableid=0, s=70.38.12.106 (Dialer1), d=87.117.23.28 (FastEthernet0/0), routed via RIB
*Mar 1 06:42:08.116: IP: s=70.38.12.106 (Dialer1), d=87.117.23.28 (FastEthernet0/0), g=87.117.23.28, len 48, forward
*Mar 1 06:42:08.116: TCP src=14396, dst=22, seq=1158592800, ack=1511911956, win=65535 SYN
*Mar 1 06:42:08.116: IP: s=70.38.12.106 (Dialer1), d=87.117.23.28 (FastEthernet0/0), len 48, encapsulation failed
*Mar 1 06:42:08.116: TCP src=14396, dst=22, seq=1158592800, ack=1511911956, win=65535 SYN
*Mar 1 06:42:08.116: IP: tableid=0, s=87.117.23.29 (FastEthernet0/0), d=70.38.12.106 (Dialer1), routed via RIB
*Mar 1 06:42:08.120: IP: s=87.117.23.29 (FastEthernet0/0), d=70.38.12.106 (Dialer1), g=70.38.12.106, len 40, forward
*Mar 1 06:42:08.120: TCP src=22, dst=14396, seq=0, ack=1407967283, win=0 ACK RST
*Mar 1 06:42:08.120: IP: tableid=0, s=70.38.12.106 (Dialer1), d=87.117.23.31 (FastEthernet0/0), routed via RIB
*Mar 1 06:42:08.120: IP: s=70.38.12.106 (Dialer1), d=87.117.23.31 (FastEthernet0/0), len 48, rcvd 5
*Mar 1 06:42:08.124: TCP src=14396, dst=22, seq=1757755239, ack=1505594239, win=65535 SYN
*Mar 1 06:42:08.124: IP: tableid=0, s=70.38.12.106 (Dialer1), d=87.117.23.24 (FastEthernet0/0), routed via RIB
*Mar 1 06:42:08.124: IP: s=70.38.12.106 (Dialer1), d=87.117.23.24 (FastEthernet0/0), len 48, rcvd 5
*Mar 1 06:42:08.124: TCP src=14396, dst=22, seq=770516256, ack=929184549, win=65535 SYN
*Mar 1 06:42:08.124: IP: tableid=0, s=70.38.12.106 (Dialer1), d=87.117.23.25 (FastEthernet0/0), routed via RIB
*Mar 1 06:42:08.124: IP: s=70.38.12.106 (Dialer1), d=87.117.23.25, len 48, rcvd 4
*Mar 1 06:42:08.124: TCP src=14396, dst=22, seq=1172533526, ack=1952033748, win=65535 SYN
*Mar 1 06:42:08.124: IP: tableid=0, s=87.117.23.25 (local), d=70.38.12.106 (Dialer1), routed via RIB
*Mar 1 06:42:08.124: IP: s=87.117.23.25 (local), d=70.38.12.106 (Dialer1), len40, sending
*Mar 1 06:42:08.128: TCP src=22, dst=14396, seq=1952033748, ack=1172533527, win=0 ACK RST
*Mar 1 06:42:08.128: IP: tableid=0, s=70.38.12.106 (Dialer1), d=87.117.23.30 (FastEthernet0/0), routed via RIB
*Mar 1 06:42:08.128: IP: s=70.38.12.106 (Dialer1), d=87.117.23.30 (FastEthernet0/0), g=87.117.23.30, len 48, forward
*Mar 1 06:42:08.128: TCP src=14396, dst=22, seq=1362397949, ack=1538907941, win=65535 SYN
*Mar 1 06:42:08.128: IP: s=70.38.12.106 (Dialer1), d=87.117.23.30 (FastEthernet0/0), len 48, encapsulation failed
*Mar 1 06:42:08.128: TCP src=14396, dst=22, seq=1362397949, ack=1538907941, win=65535 SYN
*Mar 1 06:42:09.486: IP: tableid=0, s=213.133.21.52 (Dialer1), d=87.117.23.27 (FastEthernet0/0), routed via RIB
*Mar 1 06:42:09.486: IP: s=213.133.21.52 (Dialer1), d=87.117.23.27 (FastEthernet0/0), g=87.117.23.27, len 48, forward
*Mar 1 06:42:09.486: TCP src=15265, dst=445, seq=1792022753, ack=0, win=65535 SYN
*Mar 1 06:42:09.486: IP: s=213.133.21.52 (Dialer1), d=87.117.23.27 (FastEthernet0/0), len 48, encapsulation failed
*Mar 1 06:42:09.486: TCP src=15265, dst=445, seq=1792022753, ack=0, win=65535 SYN
*Mar 1 06:42:15.244: IP: tableid=0, s=208.248.77.132 (Dialer1), d=87.117.23.25(FastEthernet0/0), routed via RIB
*Mar 1 06:42:15.244: IP: s=208.248.77.132 (Dialer1), d=87.117.23.25, len 40, rcvd 4
*Mar 1 06:42:15.244: TCP src=80, dst=11444, seq=2739766622, ack=305419897,win=16384 ACK SYN
*Mar 1 06:42:15.248: IP: tableid=0, s=87.117.23.25 (local), d=208.248.77.132 (Dialer1), routed via RIB
*Mar 1 06:42:15.248: IP: s=87.117.23.25 (local), d=208.248.77.132 (Dialer1), len 40, sending
*Mar 1 06:42:15.248: TCP src=11444, dst=80, seq=305419897, ack=0, win=0 RST
*Mar 1 06:42:15.256: IP: tableid=0, s=208.248.77.132 (Dialer1), d=87.117.23.30(FastEthernet0/0), routed via RIB
*Mar 1 06:42:15.256: IP: s=208.248.77.132 (Dialer1), d=87.117.23.30 (FastEthernet0/0), g=87.117.23.30, len 40, forward
*Mar 1 06:42:15.256: TCP src=80, dst=11449, seq=546771698, ack=305419897, win=16384 ACK SYN
*Mar 1 06:42:15.260: IP: s=208.248.77.132 (Dialer1), d=87.117.23.30 (FastEthernet0/0), len 40, encapsulation failed
*Mar 1 06:42:15.260: TCP src=80, dst=11449, seq=546771698, ack=305419897, win=16384 ACK SYN
*Mar 1 06:42:15.260: IP: tableid=0, s=208.248.77.132 (Dialer1), d=87.117.23.24(FastEthernet0/0), routed via RIB
*Mar 1 06:42:15.260: IP: s=208.248.77.132 (Dialer1), d=87.117.23.24 (FastEthernet0/0), len 40, rcvd 5
*Mar 1 06:42:15.260: TCP src=80, dst=11443, seq=2271635578, ack=305419897,win=16384 ACK SYN
*Mar 1 06:42:15.260: IP: tableid=0, s=208.248.77.132 (Dialer1), d=87.117.23.28(FastEthernet0/0), routed via RIB
*Mar 1 06:42:15.260: IP: s=208.248.77.132 (Dialer1), d=87.117.23.28 (FastEthernet0/0), g=87.117.23.28, len 40, forward
*Mar 1 06:42:15.264: TCP src=80, dst=11447, seq=3729382218, ack=305419897,win=16384 ACK SYN
*Mar 1 06:42:15.264: IP: s=208.248.77.132 (Dialer1), d=87.117.23.28 (FastEthernet0/0), len 40, encapsulation failed
*Mar 1 06:42:15.264: TCP src=80, dst=11447, seq=3729382218, ack=305419897,win=16384 ACK SYN
*Mar 1 06:42:15.264: IP: tableid=0, s=87.117.23.29 (FastEthernet0/0), d=208.248.77.132 (Dialer1), routed via RIB
*Mar 1 06:42:15.264: IP: s=87.117.23.29 (FastEthernet0/0), d=208.248.77.132 (Dialer1), g=208.248.77.132, len 40, forward
*Mar 1 06:42:15.264: TCP src=11448, dst=80, seq=305419897, ack=305419897, win=0 RST
*Mar 1 06:42:15.264: IP: tableid=0, s=208.248.77.132 (Dialer1), d=87.117.23.31(FastEthernet0/0), routed via RIB
*Mar 1 06:42:15.268: IP: s=208.248.77.132 (Dialer1), d=87.117.23.31 (FastEthernet0/0), len 40, rcvd 5
*Mar 1 06:42:15.268: TCP src=80, dst=11450, seq=819605269, ack=305419897, win=16384 ACK SYN
*Mar 1 06:42:15.268: IP: tableid=0, s=208.248.77.132 (Dialer1), d=87.117.23.27(FastEthernet0/0), routed via RIB
*Mar 1 06:42:15.268: IP: s=208.248.77.132 (Dialer1), d=87.117.23.27 (FastEthernet0/0), g=87.117.23.27, len 40, forward
*Mar 1 06:42:15.268: TCP src=80, dst=11446, seq=3273899462, ack=305419897,win=16384 ACK SYN
*Mar 1 06:42:15.268: IP: s=208.248.77.132 (Dialer1), d=87.117.23.27 (FastEthernet0/0), len 40, encapsulation failed
*Mar 1 06:42:15.268: TCP src=80, dst=11446, seq=3273899462, ack=305419897,win=16384 ACK SYN
*Mar 1 06:43:19.818: IP: tableid=0, s=178.140.115.244 (Dialer1), d=87.117.23.31 (FastEthernet0/0), routed via RIB
*Mar 1 06:43:19.818: IP: s=178.140.115.244 (Dialer1), d=87.117.23.31 (FastEthernet0/0), len 52, rcvd 5
*Mar 1 06:43:19.818: TCP src=3550, dst=445, seq=498514860, ack=0, win=65535 SYN
*Mar 1 06:43:21.048: IP: tableid=0, s=83.27.252.163 (Dialer1), d=87.117.23.24 (FastEthernet0/0), routed via RIB
*Mar 1 06:43:21.048: IP: s=83.27.252.163 (Dialer1), d=87.117.23.24 (FastEthernet0/0), len 48, rcvd 5
*Mar 1 06:43:21.048: TCP src=2113, dst=445, seq=3456505075, ack=0, win=64240 SYN
*Mar 1 06:43:22.815: IP: tableid=0, s=178.140.115.244 (Dialer1), d=87.117.23.31 (FastEthernet0/0), routed via RIB
*Mar 1 06:43:22.815: IP: s=178.140.115.244 (Dialer1), d=87.117.23.31 (FastEthernet0/0), len 52, rcvd 5
*Mar 1 06:43:22.819: TCP src=3550, dst=445, seq=498514860, ack=0, win=65535 SYN
*Mar 1 06:43:24.069: IP: tableid=0, s=83.27.252.163 (Dialer1), d=87.117.23.24 (FastEthernet0/0), routed via RIB
*Mar 1 06:43:24.069: IP: s=83.27.252.163 (Dialer1), d=87.117.23.24 (FastEthernet0/0), len 48, rcvd 5
*Mar 1 06:43:24.069: TCP src=2113, dst=445, seq=3456505075, ack=0, win=64240 SYN
*Mar 1 06:44:24.600: IP: tableid=0, s=87.117.23.29 (FastEthernet0/0), d=83.221.202.254 (Dialer1), routed via RIB
*Mar 1 06:44:24.600: IP: s=87.117.23.29 (FastEthernet0/0), d=83.221.202.254 (Dialer1), g=83.221.202.254, len 60, forward
*Mar 1 06:44:24.600: UDP src=61689, dst=53
*Mar 1 06:44:25.826: IP: tableid=0, s=87.117.23.29 (FastEthernet0/0), d=62.105.144.45 (Dialer1), routed via RIB
*Mar 1 06:44:25.826: IP: s=87.117.23.29 (FastEthernet0/0), d=62.105.144.45 (Dialer1), g=62.105.144.45, len 113, forward
*Mar 1 06:44:25.826: UDP src=60332, dst=53
*Mar 1 06:44:59.257: IP: tableid=0, s=31.181.220.106 (Dialer1), d=87.117.23.28(FastEthernet0/0), routed via RIB
*Mar 1 06:44:59.257: IP: s=31.181.220.106 (Dialer1), d=87.117.23.28 (FastEthernet0/0), g=87.117.23.28, len 28, forward
*Mar 1 06:44:59.257: ICMP type=8, code=0
*Mar 1 06:44:59.257: IP: s=31.181.220.106 (Dialer1), d=87.117.23.28 (FastEthernet0/0), len 28, encapsulation failed
*Mar 1 06:44:59.257: ICMP type=8, code=0
*Mar 1 06:45:26.938: IP: tableid=0, s=61.160.235.208 (Dialer1), d=87.117.23.31(FastEthernet0/0), routed via RIB
*Mar 1 06:45:26.938: IP: s=61.160.235.208 (Dialer1), d=87.117.23.31 (FastEthernet0/0), len 44, rcvd 5
*Mar 1 06:45:26.938: TCP src=80, dst=48715, seq=3487140012, ack=3674933078, win=5840 ACK SYN
много encapsulation failed, которые занимают достаточно большую долю от общего количества пакетов. Показать статистику пока не могу, только завтра, так как маршрутизатор случайно "отрубил" от внешнего мира.
На форуме циски предлагали сделать arp IP MAC snap, что мне не помогло, хотя, возможно там не совсем вник в проблему изза плохого знания английского.