Переключая программы, вижу запрос на вступление в группу
Код: Выделить всё
plohish# tcpdump -i fxp1 igmp
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on fxp1, link-type EN10MB (Ethernet), capture size 96 bytes
12:02:44.706251 IP 192.168.28.52 > 224.0.0.41: igmp v2 report 224.0.0.41
12:02:46.760757 IP 192.168.28.52 > 224.0.0.41: igmp v2 report 224.0.0.41
12:03:02.295754 IP 192.168.28.52 > 224.0.0.42: igmp v2 report 224.0.0.42
12:03:06.560508 IP 192.168.28.52 > 224.0.0.42: igmp v2 report 224.0.0.42
12:03:11.561769 IP 192.168.28.52 > ALL-ROUTERS.MCAST.NET: igmp leave 224.0.0.40
12:03:11.608128 IP 192.168.28.52 > 224.0.0.40: igmp v2 report 224.0.0.40
12:03:13.560427 IP 192.168.28.52 > 224.0.0.40: igmp v2 report 224.0.0.40
на внешнем fxp1 прёт UDP трафик
Код: Выделить всё
plohish# tcpdump -i fxp1 udp
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on fxp1, link-type EN10MB (Ethernet), capture size 96 bytes
12:07:51.897605 IP 192.168.101.10.1228 > 224.0.0.40.1234: UDP, length 1400
12:07:51.897719 IP 192.168.101.10.1228 > 224.0.0.40.1234: UDP, length 1400
12:07:51.897840 IP 192.168.101.10.1230 > 224.0.0.42.1234: UDP, length 1400
12:07:51.897954 IP 192.168.101.10.1228 > 224.0.0.40.1234: UDP, length 1400
12:07:51.898071 IP 192.168.101.10.1228 > 224.0.0.40.1234: UDP, length 1400
12:07:51.898187 IP 192.168.101.10.1228 > 224.0.0.40.1234: UDP, length 1400
12:07:51.898304 IP 192.168.101.10.1229 > 224.0.0.41.1234: UDP, length 1400
12:07:51.898422 IP 192.168.101.10.1229 > 224.0.0.41.1234: UDP, length 1400
12:07:51.898539 IP 192.168.101.10.1230 > 224.0.0.42.1234: UDP, length 1400
12:07:51.898656 IP 192.168.101.10.1230 > 224.0.0.42.1234: UDP, length 1400
12:07:51.898773 IP 192.168.101.10.1230 > 224.0.0.42.1234: UDP, length 1400
12:07:51.898891 IP 192.168.101.10.1229 > 224.0.0.41.1234: UDP, length 1400
12:07:51.899008 IP 192.168.101.10.1230 > 224.0.0.42.1234: UDP, length 1400
12:07:51.916588 IP 192.168.101.10.1228 > 224.0.0.40.1234: UDP, length 1400
12:07:51.916877 IP 192.168.101.10.1228 > 224.0.0.40.1234: UDP, length 1400
12:07:51.916993 IP 192.168.101.10.1228 > 224.0.0.40.1234: UDP, length 1400
12:07:51.917110 IP 192.168.101.10.1228 > 224.0.0.40.1234: UDP, length 1400
12:07:51.917228 IP 192.168.101.10.1228 > 224.0.0.40.1234: UDP, length 1400
12:07:51.917345 IP 192.168.101.10.1229 > 224.0.0.41.1234: UDP, length 1400
вот что говорит igmpproxy
Код: Выделить всё
plohish# igmpproxy -d
igmpproxy, Version 0.1 beta2, Build 100219
Copyright 2005 by Johnny Egeland <johnny@rlo.org>
Distributed under the GNU GENERAL PUBLIC LICENSE, Version 2 - check GPL.txt
Debu: Searching for config file at '/usr/local/etc/igmpproxy.conf'
Debu: Config: Got a phyint token.
Debu: Config: IF: Config for interface fxp1.
Debu: Config: IF: Got upstream token.
Debu: Config: IF: Got ratelimit token '0'.
Debu: Config: IF: Got threshold token '1'.
Debu: Config: IF: Got altnet token 192.168.101.0/24.
Debu: Config: IF: Altnet: Parsed altnet to 192.168.101/24.
Debu: IF name : fxp1
Debu: Next ptr : 0
Debu: Ratelimit : 0
Debu: Threshold : 1
Debu: State : 1
Debu: Allowednet ptr : 2820b030
Debu: Config: Got a phyint token.
Debu: Config: IF: Config for interface fxp0.
Debu: Config: IF: Got downstream token.
Debu: Config: IF: Got ratelimit token '0'.
Debu: Config: IF: Got threshold token '1'.
Debu: Config: IF: Got altnet token 172.16.1.0/24.
Debu: Config: IF: Altnet: Parsed altnet to 172.16.1/24.
Debu: IF name : fxp0
Debu: Next ptr : 0
Debu: Ratelimit : 0
Debu: Threshold : 1
Debu: State : 2
Debu: Allowednet ptr : 2820b040
Debu: Config: Got a phyint token.
Debu: Config: IF: Config for interface lo0.
Debu: Config: IF: Got disabled token.
Debu: IF name : lo0
Debu: Next ptr : 0
Debu: Ratelimit : 0
Debu: Threshold : 1
Debu: State : 0
Debu: Allowednet ptr : 0
Debu: Config: Got a phyint token.
Debu: Config: IF: Config for interface ng0.
Debu: Config: IF: Got disabled token.
Debu: IF name : ng0
Debu: Next ptr : 0
Debu: Ratelimit : 0
Debu: Threshold : 1
Debu: State : 0
Debu: Allowednet ptr : 0
Debu: Adding Physical Index value of IF 'fxp0' is 1
Debu: buildIfVc: Interface fxp0 Addr: 172.16.1.1, Flags: 0xffff8843, Network: 172.16/16
Debu: Adding Physical Index value of IF 'fxp1' is 2
Debu: buildIfVc: Interface fxp1 Addr: 192.168.28.52, Flags: 0xffff8843, Network: 192.168.28/24
Debu: Adding Physical Index value of IF 'lo0' is 4
Debu: buildIfVc: Interface lo0 Addr: 127.0.0.1, Flags: 0xffff8049, Network: 127/8
Debu: Adding Physical Index value of IF 'ng0' is 5
Debu: buildIfVc: Interface ng0 Addr: X.X.X.X, Flags: 0xffff88d1, Network: X.X.X.X/32
Debu: Found config for fxp0
Debu: Found config for fxp1
Debu: Found config for ng0
Note: adding VIF, Ix 0 Fl 0x0 IP 0x010110ac fxp0, Threshold: 1, Ratelimit: 0
Debu: Network for [fxp0] : 172.16/16
Debu: Network for [fxp0] : 172.16.1/24
Note: adding VIF, Ix 1 Fl 0x0 IP 0x341ca8c0 fxp1, Threshold: 1, Ratelimit: 0
Debu: Network for [fxp1] : 192.168.28/24
Debu: Network for [fxp1] : 192.168.101/24
Note: adding VIF, Ix 2 Fl 0x0 IP 0x012a195e ng0, Threshold: 1, Ratelimit: 0
Debu: Network for [ng0] : X.X.X.X/32
Debu: Got 232448 byte buffer size in 8 iterations
Debu: Joining all-routers group 224.0.0.2 on vif 172.16.1.1
Note: joinMcGroup: 224.0.0.2 on fxp0
Debu: SENT Membership query from 172.16.1.1 to 224.0.0.1
Debu: Sent membership query from 172.16.1.1 to 224.0.0.1. Delay: 10
Debu: Created timeout 1 (#0) - delay 10 secs
Debu: (Id:1, Time:10)
Debu: Created timeout 2 (#1) - delay 21 secs
Debu: (Id:1, Time:10)
Debu: (Id:2, Time:21)
Debu: Packet from 172.16.1.1: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report from 172.16.1.1 to 224.0.0.2 (ip_hl 24, data 8)
Note: The IGMP message was from myself. Ignoring.
Debu: Packet from 172.16.1.1: proto: 2 hdrlen: 20 iplen: 8 or 2048
Note: RECV Membership query from 172.16.1.1 to 224.0.0.1 (ip_hl 20, data 8)
Debu: Route activate request from 192.168.28.117 to 239.192.152.143, downIf -1
Debu: No table entry for 239.192.152.143 [From: 192.168.28.117]. Inserting route.
Debu: No existing route for 239.192.152.143. Create new.
Debu: No routes in table. Insert at beginning.
Info: Inserted route table entry for 239.192.152.143 on VIF #-1
Debu: No downstream listeners for group 239.192.152.143. No join sent.
Debu:
Current routing table (Insert Route);
-----------------------------------------------------
Debu: #0: Dst: 239.192.152.143, Age:2, St: I, OutVifs: 0x00000000
Debu:
-----------------------------------------------------
Note: New origin for route 239.192.152.143 is 192.168.28.117, flood -1
Debu:
Current routing table (Activate Route);
-----------------------------------------------------
Debu: #0: Dst: 239.192.152.143, Age:2, St: A, OutVifs: 0x00000000
Debu: #0: Origin: 192.168.28.117 floodIf -1 pktcnt 0
Debu:
-----------------------------------------------------
Debu: Packet from 172.16.1.2: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report from 172.16.1.2 to 224.0.0.40 (ip_hl 24, data 8)
Debu: Should insert group 224.0.0.40 (from: 172.16.1.2) to route table. Vif Ix : 0
Debu: No existing route for 224.0.0.40. Create new.
Debu: Found existing routes. Find insert location.
Debu: Inserting at beginning, before route 239.192.152.143
Info: Inserted route table entry for 224.0.0.40 on VIF #0
Debu: Joining group 224.0.0.40 upstream on IF address 192.168.28.52
Note: joinMcGroup: 224.0.0.40 on fxp1
Debu:
Current routing table (Insert Route);
-----------------------------------------------------
Debu: #0: Dst: 224.0.0.40, Age:2, St: I, OutVifs: 0x00000001
Debu: #1: Dst: 239.192.152.143, Age:2, St: A, OutVifs: 0x00000000
Debu: #1: Origin: 192.168.28.117 floodIf -1 pktcnt 0
Debu:
-----------------------------------------------------
Debu: Eliminate compiler warning for field type = 22
Debu: Packet from 192.168.28.52: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report from 192.168.28.52 to 224.0.0.40 (ip_hl 24, data 8)
Note: The IGMP message was from myself. Ignoring.
Debu: Packet from 192.168.28.52: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report from 192.168.28.52 to 224.0.0.40 (ip_hl 24, data 8)
Note: The IGMP message was from myself. Ignoring.
Debu: Packet from 172.16.1.2: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report from 172.16.1.2 to 224.0.0.252 (ip_hl 24, data 8)
Debu: Should insert group 224.0.0.252 (from: 172.16.1.2) to route table. Vif Ix : 0
Debu: No existing route for 224.0.0.252. Create new.
Debu: Found existing routes. Find insert location.
Debu: Inserting after route 239.192.152.143
Info: Inserted route table entry for 224.0.0.252 on VIF #0
Debu: Joining group 224.0.0.252 upstream on IF address 192.168.28.52
Note: joinMcGroup: 224.0.0.252 on fxp1
Debu:
Current routing table (Insert Route);
-----------------------------------------------------
Debu: #0: Dst: 224.0.0.40, Age:2, St: I, OutVifs: 0x00000001
Debu: #1: Dst: 239.192.152.143, Age:2, St: A, OutVifs: 0x00000000
Debu: #1: Origin: 192.168.28.117 floodIf -1 pktcnt 0
Debu: #2: Dst: 224.0.0.252, Age:2, St: I, OutVifs: 0x00000001
Debu:
-----------------------------------------------------
Debu: Eliminate compiler warning for field type = 22
Debu: Packet from 192.168.28.52: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report from 192.168.28.52 to 224.0.0.252 (ip_hl 24, data 8)
Note: The IGMP message was from myself. Ignoring.
Debu: Packet from 172.16.1.2: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report from 172.16.1.2 to 239.255.255.250 (ip_hl 24, data 8)
Debu: Should insert group 239.255.255.250 (from: 172.16.1.2) to route table. Vif Ix : 0
Debu: No existing route for 239.255.255.250. Create new.
Debu: Found existing routes. Find insert location.
Debu: Inserting after route 239.192.152.143
Info: Inserted route table entry for 239.255.255.250 on VIF #0
Debu: Joining group 239.255.255.250 upstream on IF address 192.168.28.52
Note: joinMcGroup: 239.255.255.250 on fxp1
Debu:
Current routing table (Insert Route);
-----------------------------------------------------
Debu: #0: Dst: 224.0.0.40, Age:2, St: I, OutVifs: 0x00000001
Debu: #1: Dst: 239.192.152.143, Age:2, St: A, OutVifs: 0x00000000
Debu: #1: Origin: 192.168.28.117 floodIf -1 pktcnt 0
Debu: #2: Dst: 239.255.255.250, Age:2, St: I, OutVifs: 0x00000001
Debu: #3: Dst: 224.0.0.252, Age:2, St: I, OutVifs: 0x00000001
Debu:
-----------------------------------------------------
Debu: Eliminate compiler warning for field type = 22
Debu: Packet from 192.168.28.52: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report from 192.168.28.52 to 239.255.255.250 (ip_hl 24, data 8)
Note: The IGMP message was from myself. Ignoring.
Debu: Packet from 172.16.1.1: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report from 172.16.1.1 to 224.0.0.2 (ip_hl 24, data 8)
Note: The IGMP message was from myself. Ignoring.
Debu: About to call timeout 1 (#0)
Debu: Aging routes in table.
Warn: age_table_entry: SIOCGETSGCNT failing for (192.168.28.117 239.192.152.143); Errno(49): Can't assign requested address
Debu: Aging Origin 192.168.28.117 Dst 239.192.152.143 PktCnt 0 -> 0
Debu: Origin 192.168.28.117 Vif bits : 0x00000000
Debu: Identified VIF #1 as upstream.
Note: Removing MFC: 192.168.28.117 -> 239.192.152.143, InpVIf: 1
Warn: MRT_DEL_MFC; Errno(49): Can't assign requested address
Debu:
Current routing table (Age active routes);
-----------------------------------------------------
Debu: #0: Dst: 224.0.0.40, Age:1, St: I, OutVifs: 0x00000001
Debu: #1: Dst: 239.192.152.143, Age:1, St: I, OutVifs: 0x00000000
Debu: #2: Dst: 239.255.255.250, Age:1, St: I, OutVifs: 0x00000001
Debu: #3: Dst: 224.0.0.252, Age:1, St: I, OutVifs: 0x00000001
Debu:
-----------------------------------------------------
внешний IP 192.168.28.52
внутренний роутера 172.16.1.1
внутренний, котором пытаюсь смотреть 172.16.1.2
нифига не показывает... что в принципе логично, я не вижу UDP трафика на внутреннем интерфейсе...
подскажите плиз куда рыть