Différences
Ci-dessous, les différences entre deux révisions de la page.
| Les deux révisions précédentes Révision précédente Prochaine révision | Révision précédente | ||
|
transmission:l2tp [2025/02/23 16:28] sthibaul [Documentation] |
transmission:l2tp [2025/03/30 18:47] (Version actuelle) sthibaul voir les ZLB |
||
|---|---|---|---|
| Ligne 41: | Ligne 41: | ||
| ``` | ``` | ||
| - | tcpdump -n -vvv -i any 'port 1701 and | + | tcpdump -n -vvv -i any 'udp and port 1701 and |
| | | ||
| | | ||
| Ligne 50: | Ligne 50: | ||
| ``` | ``` | ||
| - | sudo tcpdump -v -n -i any 'port 1701 | + | sudo tcpdump -v -n -i any 'udp and port 1701 and (len <= 40 or ( |
| - | and ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0x00 and udp[17] == 0x21) ) | + | ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0x00 and udp[17] == 0x21) ) |
| and ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0xFF and udp[17] == 0x03 and udp[18] == 0x00 and udp[19] == 0x21) ) | and ( not (( udp[8] & 0x40 == 0 ) and udp[16] == 0xFF and udp[17] == 0x03 and udp[18] == 0x00 and udp[19] == 0x21) ) | ||
| and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0x00 and udp[19] == 0x21) ) | and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0x00 and udp[19] == 0x21) ) | ||
| Ligne 80: | Ligne 80: | ||
| and ( not (( udp[8] & 0x40 != 0 ) and udp[20] == 0xa ) ) | and ( not (( udp[8] & 0x40 != 0 ) and udp[20] == 0xa ) ) | ||
| and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0xFF and udp[19] == 0x03 and udp[22] == 0xa ) ) | and ( not (( udp[8] & 0x40 != 0 ) and udp[18] == 0xFF and udp[19] == 0x03 and udp[22] == 0xa ) ) | ||
| - | ' | + | ) )' |
| + | ``` | ||
| + | |||
| + | * Observer un tunnel en particulier: | ||
| + | |||
| + | ``` | ||
| + | sudo tcpdump -v -n -i any 'udp and port 1701 | ||
| + | and ( ( ( udp[8] & 0x40 == 0 ) and udp[10] = 0 and udp[11] = 10 ) or | ||
| + | ( ( udp[8] & 0x40 != 0 ) and udp[12] = 0 and udp[13] = 10 ) ) | ||
| + | | ||
| ``` | ``` | ||
| Ligne 86: | Ligne 95: | ||
| ``` | ``` | ||
| - | sudo tcpdump -v -n -i any 'port 1701 | + | sudo tcpdump -v -n -i any 'udp and port 1701 |
| and ( ( ( udp[8] & 0x40 == 0 ) and udp[12] = 0 and udp[13] = 123 ) or | and ( ( ( udp[8] & 0x40 == 0 ) and udp[12] = 0 and udp[13] = 123 ) or | ||
| ( ( udp[8] & 0x40 != 0 ) and udp[14] = 0 and udp[15] = 123 ) ) | ( ( udp[8] & 0x40 != 0 ) and udp[14] = 0 and udp[15] = 123 ) ) | ||
| Ligne 95: | Ligne 104: | ||
| ``` | ``` | ||
| - | sudo tcpdump -v -n -i any 'port 1701 | + | sudo tcpdump -v -n -i any 'udp and port 1701 |
| and ( ( ( udp[8] & 0x40 != 0 ) and udp[18] == 0x00 and udp[19] == 0x57 and udp[26] == 0x11 and udp[60] == 0x2 and ( udp[61] == 0x22 or udp[61] == 0x23 ) ) | and ( ( ( udp[8] & 0x40 != 0 ) and udp[18] == 0x00 and udp[19] == 0x57 and udp[26] == 0x11 and udp[60] == 0x2 and ( udp[61] == 0x22 or udp[61] == 0x23 ) ) | ||
| or ( ( udp[8] & 0x40 == 0 ) and udp[16] == 0x00 and udp[17] == 0x57 and udp[24] == 0x11 and udp[58] == 0x2 and ( udp[59] == 0x22 or udp[59] == 0x23 ) ) ) | or ( ( udp[8] & 0x40 == 0 ) and udp[16] == 0x00 and udp[17] == 0x57 and udp[24] == 0x11 and udp[58] == 0x2 and ( udp[59] == 0x22 or udp[59] == 0x23 ) ) ) | ||
| Ligne 105: | Ligne 114: | ||
| ``` | ``` | ||
| - | sudo tcpdump -v -n -i any 'port 1701 | + | sudo tcpdump -v -n -i any 'udp and port 1701 |
| and ( ( ( udp[8] & 0x40 != 0 ) and udp[18] == 0x00 and udp[19] == 0x57 and udp[26] == 58 and ( udp[60] == 134 or udp[60] == 133 ) ) | and ( ( ( udp[8] & 0x40 != 0 ) and udp[18] == 0x00 and udp[19] == 0x57 and udp[26] == 58 and ( udp[60] == 134 or udp[60] == 133 ) ) | ||
| or ( ( udp[8] & 0x40 == 0 ) and udp[16] == 0x00 and udp[17] == 0x57 and udp[24] == 58 and ( udp[58] == 134 or udp[58] == 133 ) ) ) | or ( ( udp[8] & 0x40 == 0 ) and udp[16] == 0x00 and udp[17] == 0x57 and udp[24] == 58 and ( udp[58] == 134 or udp[58] == 133 ) ) ) | ||