Différences
Ci-dessous, les différences entre deux révisions de la page.
Les deux révisions précédentes Révision précédente Prochaine révision | Révision précédente | ||
transmission:l2tp [2024/09/04 14:45] sthibaul |
transmission:l2tp [2025/03/30 18:47] (Version actuelle) sthibaul voir les ZLB |
||
---|---|---|---|
Ligne 31: | Ligne 31: | ||
* https:// | * https:// | ||
* https:// | * https:// | ||
- | * https:// | ||
* https:// | * https:// | ||
* Ancien upstream: https:// | * Ancien upstream: https:// | ||
Ligne 42: | Ligne 41: | ||
``` | ``` | ||
- | tcpdump -n -vvv -i any 'port 1701 and | + | tcpdump -n -vvv -i any 'udp and port 1701 and |
| | ||
| | ||
Ligne 48: | Ligne 47: | ||
``` | ``` | ||
- | * Observer les négociations en tous genre (pas de trafic ipv4, ipv6, echo, ccp): | + | * Observer les négociations en tous genre (pas de trafic ipv4, ipv6, echo, ccp, mlppp): |
``` | ``` | ||
- | sudo tcpdump -v -n -i any 'port 1701 | + | sudo tcpdump -v -n -i any 'udp and port 1701 and (len <= 40 or ( |
- | and ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0x00 and udp[17] == 0x21) ) | + | ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0x00 and udp[17] == 0x21) ) |
+ | and ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0xFF and udp[17] == 0x03 and udp[18] == 0x00 and udp[19] == 0x21) ) | ||
and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0x00 and udp[19] == 0x21) ) | and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0x00 and udp[19] == 0x21) ) | ||
+ | and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0xFF and udp[19] == 0x03 and udp[20] == 0x00 and udp[21] == 0x21) ) | ||
+ | |||
and ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0x00 and udp[17] == 0x57) ) | and ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0x00 and udp[17] == 0x57) ) | ||
+ | and ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0xFF and udp[17] == 0x03 and udp[18] == 0x00 and udp[19] == 0x57) ) | ||
and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0x00 and udp[19] == 0x57) ) | and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0x00 and udp[19] == 0x57) ) | ||
+ | and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0xFF and udp[19] == 0x03 and udp[20] == 0x00 and udp[21] == 0x57) ) | ||
+ | |||
+ | and ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0x00 and udp[17] == 0x3d) ) | ||
+ | and ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0xFF and udp[17] == 0x03 and udp[18] == 0x00 and udp[19] == 0x3d) ) | ||
+ | and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0x00 and udp[19] == 0x3d) ) | ||
+ | and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0xFF and udp[19] == 0x03 and udp[20] == 0x00 and udp[21] == 0x3d) ) | ||
+ | |||
and ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0x80 and udp[17] == 0xfd) ) | and ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0x80 and udp[17] == 0xfd) ) | ||
+ | and ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0xFF and udp[17] == 0x03 and udp[18] == 0x80 and udp[19] == 0xfd) ) | ||
and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0x80 and udp[19] == 0xfd) ) | and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0x80 and udp[19] == 0xfd) ) | ||
+ | and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0xFF and udp[19] == 0x03 and udp[20] == 0x80 and udp[21] == 0xfd) ) | ||
+ | |||
and ( not (( udp[8] & 0x40 == 0 ) and udp[18] == 0x9 ) ) | and ( not (( udp[8] & 0x40 == 0 ) and udp[18] == 0x9 ) ) | ||
+ | and ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0xFF and udp[17] == 0x03 and udp[20] == 0x9 ) ) | ||
and ( not (( udp[8] & 0x40 != 0 ) and udp[20] == 0x9 ) ) | and ( not (( udp[8] & 0x40 != 0 ) and udp[20] == 0x9 ) ) | ||
+ | and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0xFF and udp[19] == 0x03 and udp[22] == 0x9 ) ) | ||
+ | |||
and ( not (( udp[8] & 0x40 == 0 ) and udp[18] == 0xa ) ) | and ( not (( udp[8] & 0x40 == 0 ) and udp[18] == 0xa ) ) | ||
+ | and ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0xFF and udp[17] == 0x03 and udp[20] == 0xa ) ) | ||
and ( not (( udp[8] & 0x40 != 0 ) and udp[20] == 0xa ) ) | and ( not (( udp[8] & 0x40 != 0 ) and udp[20] == 0xa ) ) | ||
- | ' | + | and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0xFF and udp[19] == 0x03 and udp[22] == 0xa ) ) |
+ | ) )' | ||
+ | ``` | ||
+ | |||
+ | * Observer un tunnel en particulier: | ||
+ | |||
+ | ``` | ||
+ | sudo tcpdump -v -n -i any 'udp and port 1701 | ||
+ | and ( ( ( udp[8] & 0x40 == 0 ) and udp[10] = 0 and udp[11] = 10 ) or | ||
+ | ( ( udp[8] & 0x40 != 0 ) and udp[12] = 0 and udp[13] = 10 ) ) | ||
+ | | ||
``` | ``` | ||
Ligne 68: | Ligne 95: | ||
``` | ``` | ||
- | sudo tcpdump -v -n -i any 'port 1701 | + | sudo tcpdump -v -n -i any 'udp and port 1701 |
and ( ( ( udp[8] & 0x40 == 0 ) and udp[12] = 0 and udp[13] = 123 ) or | and ( ( ( udp[8] & 0x40 == 0 ) and udp[12] = 0 and udp[13] = 123 ) or | ||
( ( udp[8] & 0x40 != 0 ) and udp[14] = 0 and udp[15] = 123 ) ) | ( ( udp[8] & 0x40 != 0 ) and udp[14] = 0 and udp[15] = 123 ) ) | ||
Ligne 77: | Ligne 104: | ||
``` | ``` | ||
- | sudo tcpdump -v -n -i any 'port 1701 | + | sudo tcpdump -v -n -i any 'udp and port 1701 |
and ( ( ( udp[8] & 0x40 != 0 ) and udp[18] == 0x00 and udp[19] == 0x57 and udp[26] == 0x11 and udp[60] == 0x2 and ( udp[61] == 0x22 or udp[61] == 0x23 ) ) | and ( ( ( udp[8] & 0x40 != 0 ) and udp[18] == 0x00 and udp[19] == 0x57 and udp[26] == 0x11 and udp[60] == 0x2 and ( udp[61] == 0x22 or udp[61] == 0x23 ) ) | ||
or ( ( udp[8] & 0x40 == 0 ) and udp[16] == 0x00 and udp[17] == 0x57 and udp[24] == 0x11 and udp[58] == 0x2 and ( udp[59] == 0x22 or udp[59] == 0x23 ) ) ) | or ( ( udp[8] & 0x40 == 0 ) and udp[16] == 0x00 and udp[17] == 0x57 and udp[24] == 0x11 and udp[58] == 0x2 and ( udp[59] == 0x22 or udp[59] == 0x23 ) ) ) | ||
Ligne 87: | Ligne 114: | ||
``` | ``` | ||
- | sudo tcpdump -v -n -i any 'port 1701 | + | sudo tcpdump -v -n -i any 'udp and port 1701 |
and ( ( ( udp[8] & 0x40 != 0 ) and udp[18] == 0x00 and udp[19] == 0x57 and udp[26] == 58 and ( udp[60] == 134 or udp[60] == 133 ) ) | and ( ( ( udp[8] & 0x40 != 0 ) and udp[18] == 0x00 and udp[19] == 0x57 and udp[26] == 58 and ( udp[60] == 134 or udp[60] == 133 ) ) | ||
or ( ( udp[8] & 0x40 == 0 ) and udp[16] == 0x00 and udp[17] == 0x57 and udp[24] == 58 and ( udp[58] == 134 or udp[58] == 133 ) ) ) | or ( ( udp[8] & 0x40 == 0 ) and udp[16] == 0x00 and udp[17] == 0x57 and udp[24] == 58 and ( udp[58] == 134 or udp[58] == 133 ) ) ) |