Hi Crist Here the Logs and outputs for you
Regards Reto # tcpdump -vvXs 1500 'icmp' 172.16.224.24 -> BSD Host 172.16.1.254 -> BSD Router 12:00:43.658869 172.16.1.254 > 172.16.224.24: icmp: redirect 172.24.0.2 to host 172.16.1.252 for 172.16.224.24 > 172.24.0.2: icmp: echo request (ttl 64, id 2963 2, len 84) (ttl 64, id 12073, len 56) 0x0000 4500 0038 2f29 0000 4001 1165 ac10 01fe E..8/)..@..e.... 0x0010 ac10 e018 0501 f014 ac10 01fc 4500 0054 ............E..T 0x0020 73c0 0000 4001 cea5 ac10 e018 ac18 0002 s...@........... 0x0030 0800 8337 bba5 1600 ...7.... 12:00:44.668972 172.16.224.24 > 172.24.0.2: icmp: echo request (ttl 64, id 29634 , len 84) 0x0000 4500 0054 73c2 0000 4001 cea3 ac10 e018 E..Ts...@....... 0x0010 ac18 0002 0800 5f10 bba5 1700 4bae 463c ......_.....K.F< 0x0020 475c 0200 0809 0a0b 0c0d 0e0f 1011 1213 G\.............. 0x0030 1415 1617 1819 1a1b 1c1d 1e1f 2021 2223 .............!"# 0x0040 2425 2627 2829 2a2b 2c2d 2e2f 3031 3233 $%&'()*+,-./0123 0x0050 3435 3637 4567 12:00:44.669009 172.16.224.24 > 172.24.0.2: icmp: echo request (ttl 63, id 29634 , len 84) 0x0000 4500 0054 73c2 0000 3f01 cfa3 ac10 e018 E..Ts...?....... 0x0010 ac18 0002 0800 5f10 bba5 1700 4bae 463c ......_.....K.F< 0x0020 475c 0200 0809 0a0b 0c0d 0e0f 1011 1213 G\.............. 0x0030 1415 1617 1819 1a1b 1c1d 1e1f 2021 2223 .............!"# 0x0040 2425 2627 2829 2a2b 2c2d 2e2f 3031 3233 $%&'()*+,-./0123 0x0050 3435 3637 4567 12:00:44.669034 172.16.1.254 > 172.16.224.24: icmp: redirect 172.24.0.2 to host 172.16.1.252 for 172.16.224.24 > 172.24.0.2: icmp: echo request (ttl 64, id 2963 4, len 84) (ttl 64, id 12154, len 56) 0x0000 4500 0038 2f7a 0000 4001 1114 ac10 01fe E..8/z..@....... 0x0010 ac10 e018 0501 133c ac10 01fc 4500 0054 .......<....E..T 0x0020 73c2 0000 4001 cea3 ac10 e018 ac18 0002 s...@........... 0x0030 0800 5f10 bba5 1700 .._..... 12:00:44.755969 172.16.1.254 > 172.16.1.22: icmp: redirect 172.24.0.2 to host 17 2.16.1.252 for 172.16.1.22.139 > 172.24.0.2.1026: [|tcp] (DF) (ttl 128, id 53011 , len 1500) (DF) (ttl 64, id 12175, len 56) 0x0000 4500 0038 2f8f 4000 4001 b001 ac10 01fe E..8/.@.@....... 0x0010 ac10 0116 0501 2f26 ac10 01fc 4500 05dc ....../&....E... 0x0020 cf13 4000 8006 ccc7 ac10 0116 ac18 0002 ..@............. 0x0030 008b 0402 000b 1934 .......4 12:00:44.756062 172.16.1.254 > 172.16.1.22: icmp: redirect 172.24.0.2 to host 17 2.16.1.252 for 172.16.1.22.139 > 172.24.0.2.1026: [|tcp] (DF) (ttl 128, id 53267 , len 1500) (DF) (ttl 64, id 12176, len 56) 0x0000 4500 0038 2f90 4000 4001 b000 ac10 01fe E..8/.@.@....... 0x0010 ac10 0116 0501 2972 ac10 01fc 4500 05dc ......)r....E... 0x0020 d013 4000 8006 cbc7 ac10 0116 ac18 0002 ..@............. 0x0030 008b 0402 000b 1ee8 $ netstat -rn Routing tables Internet: Destination Gateway Flags Refs Use Netif Expire default 172.16.1.1 UGSc 2 263 fxp0 127.0.0.1 127.0.0.1 UH 1 2 lo0 139.79.35.95 172.16.1.2 UGHS 0 0 fxp0 139.79.35.195 172.16.1.2 UGHS 0 0 fxp0 139.79.35.201 172.16.1.2 UGHS 0 0 fxp0 139.79.69/24 172.16.1.2 UGSc 0 0 fxp0 172.16 link#1 UC 79 0 fxp0 172.16.1.1 0:2:b9:1d:27:20 UHLW 2 11978 fxp0 1181 172.16.1.2 0:10:7b:cc:49:2f UHLW 6 1642 fxp0 1166 ... a lot of different hosts loke the two above ... 172.17/24 link#2 UC 0 0 fxp1 => 172.17 172.17.10.250 UGSc 0 10326 fxp1 172.17.1/24 link#2 UC 0 0 fxp1 172.17.1.1 172.16.64.90 UGHS 0 0 fxp0 172.17.10/24 link#2 UC 1 0 fxp1 172.17.10.250 link#2 UHRLW 1 0 fxp1 7 172.18.1/24 link#2 UC 1 0 fxp1 172.18.1.52 0:e0:4c:39:a:36 UHLW 1 3 fxp1 1098 172.19 172.19.1.2 UGSc 1 83 fxp1 172.19.1/24 link#2 UC 1 0 fxp1 172.19.1.2 0:30:2b:0:28:84 UHLW 1 0 fxp1 1062 172.24 172.16.1.252 UGSc 0 10 fxp0 192.168.65.64/29 172.16.1.2 UGSc 0 0 fxp0 192.168.65.72/29 172.16.1.2 UGSc 0 0 fxp0 $ ifconfig fxp0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 inet 172.16.1.12 netmask 0xffff0000 broadcast 172.16.255.255 inet 172.16.1.11 netmask 0xffff0000 broadcast 172.16.255.255 inet 172.16.1.254 netmask 0xffff0000 broadcast 172.16.255.255 inet 172.16.1.10 netmask 0xffff0000 broadcast 172.16.255.255 ether 00:02:b3:86:12:38 media: Ethernet autoselect (100baseTX <full-duplex>) status: active fxp1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 inet 172.18.1.10 netmask 0xffffff00 broadcast 172.18.1.255 inet 172.19.1.10 netmask 0xffffff00 broadcast 172.19.1.255 inet 172.17.10.10 netmask 0xffffff00 broadcast 172.17.10.255 inet 172.17.0.1 netmask 0xffffff00 broadcast 172.17.0.255 inet 172.17.1.10 netmask 0xffffff00 broadcast 172.17.1.255 ether 00:02:b3:86:12:39 media: Ethernet autoselect (100baseTX) status: active -- Crist J. Clark | [EMAIL PROTECTED] | [EMAIL PROTECTED] http://people.freebsd.org/~cjc/ | [EMAIL PROTECTED] To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message