Différences
Ci-dessous, les différences entre deux révisions de la page.
| Les deux révisions précédentes Révision précédente Prochaine révision | Révision précédente | ||
| transmission:l2tp [2024/09/04 14:23] sthibaul [Documentation] | transmission:l2tp [2025/03/30 18:47] (Version actuelle) sthibaul voir les ZLB | ||
|---|---|---|---|
| Ligne 31: | Ligne 31: | ||
| * https:// | * https:// | ||
| * https:// | * https:// | ||
| - | * https:// | ||
| * https:// | * https:// | ||
| * Ancien upstream: https:// | * Ancien upstream: https:// | ||
| Ligne 42: | Ligne 41: | ||
| ``` | ``` | ||
| - | tcpdump -n -vvv -i any 'port 1701 and | + | tcpdump -n -vvv -i any 'udp and port 1701 and | 
|  |  | ||
|  |  | ||
| Ligne 48: | Ligne 47: | ||
| ``` | ``` | ||
| - | * Observer les négociations en tous genre (pas de trafic ipv4, ipv6, echo, ccp): | + | * Observer les négociations en tous genre (pas de trafic ipv4, ipv6, echo, ccp, mlppp): | 
| ``` | ``` | ||
| - | sudo tcpdump -v -n -i any 'port 1701 | + | sudo tcpdump -v -n -i any 'udp and port 1701 and (len <= 40 or ( | 
| - | and ( udp[18] | + | ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0x00 and udp[17] == 0x21) ) | 
| - | and ( udp[16] != 0x00 or udp[17] != 0x21) | + |  | 
| - | and ( udp[16] | + |  | 
| - | and ( udp[18] != 0x00 or udp[19] != 0x57) | + | and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0xFF and udp[19] == 0x03 and udp[20] == 0x00 and udp[21] == 0x21) ) | 
| - | and ( udp[16] != 0x80 or udp[17] | + | |
| - | and ( udp[18] != 0x80 or udp[19] != 0xfd) | + |  | 
| - | and ( udp[18] != 0x9 ) | + |  | 
| - | and ( udp[18] != 0xa ) | + | and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0x00 and udp[19] | 
| - | and ( udp[20] | + | and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0xFF and udp[19] == 0x03 and udp[20] == 0x00 and udp[21] == 0x57) ) | 
| - | and ( udp[20] != 0xa ) | + | |
| - | ' | + |  | 
| + | and ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0xFF and udp[17] == 0x03 and udp[18] == 0x00 and udp[19] == 0x3d) ) | ||
| + | and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0x00 and udp[19] == 0x3d) ) | ||
| + | and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0xFF and udp[19] == 0x03 and udp[20] == 0x00 and udp[21] == 0x3d) ) | ||
| + | |||
| + | and ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0x80 and udp[17] | ||
| + | and ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0xFF and udp[17] == 0x03 and udp[18] | ||
| + | and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0x80 and udp[19] | ||
| + | and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0xFF and udp[19] == 0x03 and udp[20] == 0x80 and udp[21] == 0xfd) ) | ||
| + | |||
| + |  | ||
| + | and ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0xFF and udp[17] == 0x03 and udp[20] == 0x9 ) ) | ||
| + | and ( not (( udp[8] & 0x40 != 0 ) and udp[20] == 0x9 ) ) | ||
| + |  | ||
| + | |||
| + | and ( not (( udp[8] & 0x40 == 0 ) and udp[18] == 0xa ) ) | ||
| + | and ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0xFF and udp[17] == 0x03 and udp[20] == 0xa ) ) | ||
| + | and ( not (( udp[8] & 0x40 != 0 ) and udp[20] | ||
| + | and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0xFF and udp[19] == 0x03 and udp[22] == 0xa ) ) | ||
| + | ) )' | ||
| + | ``` | ||
| + | |||
| + | * Observer un tunnel en particulier: | ||
| + | |||
| + | ``` | ||
| + | sudo tcpdump -v -n -i any 'udp and port 1701 | ||
| + | and ( ( ( udp[8] & 0x40 == 0 ) and udp[10] = 0 and udp[11] = 10 ) or | ||
| + | ( ( udp[8] & 0x40 != 0 ) and udp[12] = 0 and udp[13] = 10 ) ) | ||
| + | ' | ||
| ``` | ``` | ||
| Ligne 68: | Ligne 95: | ||
| ``` | ``` | ||
| - | sudo tcpdump -v -n -i any 'port 1701 | + | sudo tcpdump -v -n -i any 'udp and port 1701 | 
| and ( ( ( udp[8] & 0x40 == 0 ) and udp[12] = 0 and udp[13] = 123 ) or | and ( ( ( udp[8] & 0x40 == 0 ) and udp[12] = 0 and udp[13] = 123 ) or | ||
| ( ( udp[8] & 0x40 != 0 ) and udp[14] = 0 and udp[15] = 123 ) ) | ( ( udp[8] & 0x40 != 0 ) and udp[14] = 0 and udp[15] = 123 ) ) | ||
| Ligne 77: | Ligne 104: | ||
| ``` | ``` | ||
| - | sudo tcpdump -v -n -i any 'port 1701 | + | sudo tcpdump -v -n -i any 'udp and port 1701 | 
| - | and ( ( udp[18] == 0x00 and udp[19] == 0x57 and udp[26] == 0x11 and udp[60] == 0x2 and ( udp[61] == 0x22 or udp[61] == 0x23 ) ) | + | and ( ( ( udp[8] & 0x40 != 0 ) and udp[18] == 0x00 and udp[19] == 0x57 and udp[26] == 0x11 and udp[60] == 0x2 and ( udp[61] == 0x22 or udp[61] == 0x23 ) ) | 
| - | or ( udp[16] == 0x00 and udp[17] == 0x57 and udp[24] == 0x11 and udp[58] == 0x2 and ( udp[59] == 0x22 or udp[59] == 0x23 ) ) ) | + | or ( ( udp[8] & 0x40 == 0 ) and udp[16] == 0x00 and udp[17] == 0x57 and udp[24] == 0x11 and udp[58] == 0x2 and ( udp[59] == 0x22 or udp[59] == 0x23 ) ) ) | 
| ' | ' | ||
| ``` | ``` | ||
| + | * Observer les RS/RA: | ||
| + | |||
| + | ``` | ||
| + | sudo tcpdump -v -n -i any 'udp and port 1701 | ||
| + | and ( ( ( udp[8] & 0x40 != 0 ) and udp[18] == 0x00 and udp[19] == 0x57 and udp[26] == 58 and ( udp[60] == 134 or udp[60] == 133 ) ) | ||
| + | or ( ( udp[8] & 0x40 == 0 ) and udp[16] == 0x00 and udp[17] == 0x57 and udp[24] == 58 and ( udp[58] == 134 or udp[58] == 133 ) ) ) | ||
| + | ' | ||
| + | ``` | ||