rendered paste body[root@worm ~]# pfctl -sa
No ALTQ support in kernel
ALTQ related functions disabled
TRANSLATION RULES:
nat on nve0 inet from 128.0.0.0/24 to any -> (nve0) round-robin
rdr on nve0 inet proto tcp from any to any port = telnet -> 128.0.0.10 port 22
rdr on nve0 inet proto tcp from any to any port = http -> 128.0.0.10 port 80
rdr on nve0 inet proto tcp from any to any port = svn -> 128.0.0.10 port 3690
rdr on nve0 inet proto tcp from any to any port = 24 -> 128.0.0.20 port 22
rdr on nve0 inet proto tcp from any to any port = postgresql -> 128.0.0.20 port 5432
rdr on nve0 inet proto tcp from any to any port = 3306 -> 128.0.0.20 port 3306
rdr on nve0 inet proto tcp from any to any port = 5900 -> 128.0.0.80 port 5900
FILTER RULES:
scrub in all fragment reassemble
block drop in log all
pass in log quick on nve0 inet proto tcp from any to 10.0.0.227 port = ssh keep state
pass out on nve0 proto tcp all keep state
pass out on nve0 proto udp all keep state
pass in log quick on nve0 proto icmp from any to (nve0)
pass in quick on lo0 all
pass in log on nve0 inet proto tcp from 128.0.0.1 to any keep state
pass in log on lo1 inet proto tcp from 128.0.0.1 to any keep state
pass in log on nve0 inet proto tcp from any to 128.0.0.10 port = ssh keep state
pass in log on nve0 inet proto tcp from any to 128.0.0.10 port = http keep state
pass in log on nve0 inet proto tcp from any to 128.0.0.10 port = svn keep state
pass in log on lo1 inet proto tcp from any to 128.0.0.10 port = ssh keep state
pass in log on lo1 inet proto tcp from any to 128.0.0.10 port = http keep state
pass in log on lo1 inet proto tcp from any to 128.0.0.10 port = svn keep state
pass in log on nve0 inet proto tcp from any to 128.0.0.20 port = ssh keep state
pass in log on nve0 inet proto tcp from any to 128.0.0.20 port = 3306 keep state
pass in log on nve0 inet proto tcp from any to 128.0.0.20 port = postgresql keep state
pass in log on lo1 inet proto tcp from any to 128.0.0.20 port = ssh keep state
pass in log on lo1 inet proto tcp from any to 128.0.0.20 port = 3306 keep state
pass in log on lo1 inet proto tcp from any to 128.0.0.20 port = postgresql keep state
pass in log on nve0 inet proto tcp from any to 128.0.0.80 port = 5900 keep state
pass in log on nve0 inet proto tcp from any to 128.0.0.80 port = x11 keep state
pass in log on lo1 inet proto tcp from any to 128.0.0.80 port = 5900 keep state
pass in log on lo1 inet proto tcp from any to 128.0.0.80 port = x11 keep state
pass out log on lo1 proto tcp all keep state
STATES:
self tcp 128.0.0.20:57170 -> 128.0.0.20:5432 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.20:5432 <- 128.0.0.20:57170 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.20:5432 <- 10.0.0.227:5432 <- 200.54.68.60:52306 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:50437 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:53513 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:61450 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:59151 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:55570 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:62483 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:61973 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:65052 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:63524 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:58918 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:51751 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:61735 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:60969 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:60202 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:61226 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:60204 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:56109 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:64813 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:53295 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:62771 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:51255 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:50234 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:57149 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:53055 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:55871 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:50496 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:61507 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:50500 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:64836 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:59973 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:57673 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:50250 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:51022 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:64334 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:55890 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:61267 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:58197 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:64342 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:52311 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:62553 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:62817 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:59746 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:54885 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:55656 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:60780 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:50544 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:55665 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:62322 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:64120 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:54141 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:61054 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:54913 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:59783 TIME_WAIT:TIME_WAIT
self tcp 10.0.0.227:22 <- 10.0.0.240:64903 ESTABLISHED:ESTABLISHED
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:54155 FIN_WAIT_2:FIN_WAIT_2
self tcp 10.0.0.227:22 <- 10.0.0.240:57484 ESTABLISHED:ESTABLISHED
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:51086 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:51603 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:52377 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:60313 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:50331 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:55451 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:53148 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:53661 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:56990 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:55456 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:57259 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:63149 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:55471 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:52402 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:53685 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:53687 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:61624 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:60857 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:62905 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:51388 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:54209 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:61377 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:64964 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:64710 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:59080 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:52427 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:59863 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:62171 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:63707 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:60124 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:54237 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:63457 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:64737 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:60901 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:58344 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:56553 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:62953 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:61164 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:62188 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:54767 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:64496 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:63478 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:60667 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:52988 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:58621 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:52222 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.10:80 <- 10.0.0.227:80 <- 10.0.0.240:53246 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:61512 -> 10.0.0.227:50437 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:62885 -> 10.0.0.227:53513 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:50176 -> 10.0.0.227:61450 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:60450 -> 10.0.0.227:59151 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:52083 -> 10.0.0.227:55570 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:61899 -> 10.0.0.227:62483 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:58539 -> 10.0.0.227:61973 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:50393 -> 10.0.0.227:65052 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:55551 -> 10.0.0.227:63524 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:61043 -> 10.0.0.227:58918 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:50232 -> 10.0.0.227:51751 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:51163 -> 10.0.0.227:61735 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:57921 -> 10.0.0.227:60969 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:61031 -> 10.0.0.227:60202 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:58304 -> 10.0.0.227:61226 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:56349 -> 10.0.0.227:60204 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:61220 -> 10.0.0.227:56109 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:57081 -> 10.0.0.227:64813 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:52077 -> 10.0.0.227:53295 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:55478 -> 10.0.0.227:62771 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:49563 -> 10.0.0.227:51255 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:49688 -> 10.0.0.227:50234 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:58769 -> 10.0.0.227:57149 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:60756 -> 10.0.0.227:53055 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:59417 -> 10.0.0.227:55871 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:51743 -> 10.0.0.227:50496 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:55219 -> 10.0.0.227:61507 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:54261 -> 10.0.0.227:50500 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:57991 -> 10.0.0.227:64836 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:59570 -> 10.0.0.227:59973 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:54839 -> 10.0.0.227:57673 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:52735 -> 10.0.0.227:50250 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:64001 -> 10.0.0.227:51022 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:58283 -> 10.0.0.227:64334 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:61002 -> 10.0.0.227:55890 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:59536 -> 10.0.0.227:61267 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:62825 -> 10.0.0.227:58197 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:51300 -> 10.0.0.227:64342 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:60400 -> 10.0.0.227:52311 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:61382 -> 10.0.0.227:62553 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:52726 -> 10.0.0.227:62817 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:65514 -> 10.0.0.227:59746 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:54396 -> 10.0.0.227:54885 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:64280 -> 10.0.0.227:55656 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:57185 -> 10.0.0.227:60780 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:63589 -> 10.0.0.227:50544 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:57619 -> 10.0.0.227:55665 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:59921 -> 10.0.0.227:62322 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:64254 -> 10.0.0.227:64120 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:61466 -> 10.0.0.227:54141 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:53178 -> 10.0.0.227:61054 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:54206 -> 10.0.0.227:54913 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:60078 -> 10.0.0.227:59783 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:58647 -> 10.0.0.227:54155 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:50701 -> 10.0.0.227:51086 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:56154 -> 10.0.0.227:51603 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:61873 -> 10.0.0.227:52377 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:52949 -> 10.0.0.227:60313 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:51520 -> 10.0.0.227:50331 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:49275 -> 10.0.0.227:55451 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:65511 -> 10.0.0.227:53148 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:64168 -> 10.0.0.227:53661 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:53950 -> 10.0.0.227:56990 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:63227 -> 10.0.0.227:55456 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:53327 -> 10.0.0.227:57259 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:65240 -> 10.0.0.227:63149 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:64555 -> 10.0.0.227:55471 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:55966 -> 10.0.0.227:52402 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:62527 -> 10.0.0.227:53685 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:62788 -> 10.0.0.227:53687 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:50016 -> 10.0.0.227:61624 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:50095 -> 10.0.0.227:60857 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:57673 -> 10.0.0.227:62905 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:54236 -> 10.0.0.227:51388 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:52395 -> 10.0.0.227:54209 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:50992 -> 10.0.0.227:61377 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:53903 -> 10.0.0.227:64964 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:55332 -> 10.0.0.227:64710 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:61248 -> 10.0.0.227:59080 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:59595 -> 10.0.0.227:52427 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:50193 -> 10.0.0.227:59863 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:54538 -> 10.0.0.227:62171 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:58244 -> 10.0.0.227:63707 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:64480 -> 10.0.0.227:60124 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:60409 -> 10.0.0.227:54237 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:64096 -> 10.0.0.227:63457 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:50538 -> 10.0.0.227:64737 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:54979 -> 10.0.0.227:60901 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:52578 -> 10.0.0.227:58344 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:55379 -> 10.0.0.227:56553 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:49799 -> 10.0.0.227:62953 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:58285 -> 10.0.0.227:61164 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:57775 -> 10.0.0.227:62188 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:55707 -> 10.0.0.227:54767 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:54508 -> 10.0.0.227:64496 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:52789 -> 10.0.0.227:63478 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:62157 -> 10.0.0.227:60667 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:59852 -> 10.0.0.227:52988 -> 201.215.200.251:80 TIME_WAIT:TIME_WAIT
self tcp 128.0.0.80:51408 -> 10.0.0.227:58621 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:61734 -> 10.0.0.227:52222 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self tcp 128.0.0.80:59147 -> 10.0.0.227:53246 -> 201.215.200.251:80 FIN_WAIT_2:FIN_WAIT_2
self udp 128.0.0.80:63631 -> 10.0.0.227:64772 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:59550 -> 10.0.0.227:54278 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:61133 -> 10.0.0.227:58382 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:62975 -> 10.0.0.227:56081 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:56018 -> 10.0.0.227:56340 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:54184 -> 10.0.0.227:59924 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:56489 -> 10.0.0.227:55829 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:63833 -> 10.0.0.227:63509 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:49813 -> 10.0.0.227:50203 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:51692 -> 10.0.0.227:56603 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:52343 -> 10.0.0.227:53533 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:54387 -> 10.0.0.227:60192 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:61875 -> 10.0.0.227:57889 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:54573 -> 10.0.0.227:56866 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:49830 -> 10.0.0.227:55595 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:49204 -> 10.0.0.227:52524 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:50292 -> 10.0.0.227:53550 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:63190 -> 10.0.0.227:64046 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:61407 -> 10.0.0.227:56879 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:53282 -> 10.0.0.227:61235 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:64708 -> 10.0.0.227:60468 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:60081 -> 10.0.0.227:57654 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:62244 -> 10.0.0.227:55608 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:63717 -> 10.0.0.227:56632 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:61936 -> 10.0.0.227:62776 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:52351 -> 10.0.0.227:56633 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:64760 -> 10.0.0.227:61756 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:58513 -> 10.0.0.227:54077 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:57430 -> 10.0.0.227:53056 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:50305 -> 10.0.0.227:55628 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:58395 -> 10.0.0.227:58956 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:50516 -> 10.0.0.227:57423 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:60880 -> 10.0.0.227:51540 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:50817 -> 10.0.0.227:65370 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:51458 -> 10.0.0.227:56155 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:64446 -> 10.0.0.227:57437 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:53085 -> 10.0.0.227:56158 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:56326 -> 10.0.0.227:62046 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:49964 -> 10.0.0.227:54880 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:52111 -> 10.0.0.227:55652 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:59694 -> 10.0.0.227:51046 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:62487 -> 10.0.0.227:62823 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:64135 -> 10.0.0.227:63594 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:56529 -> 10.0.0.227:56427 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:51636 -> 10.0.0.227:55920 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:53769 -> 10.0.0.227:50290 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:58949 -> 10.0.0.227:52339 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:56077 -> 10.0.0.227:59766 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:51721 -> 10.0.0.227:64635 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:60686 -> 10.0.0.227:60029 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:57829 -> 10.0.0.227:54399 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:59477 -> 10.0.0.227:56724 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:51496 -> 10.0.0.227:52378 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:64127 -> 10.0.0.227:60828 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:54356 -> 10.0.0.227:54941 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:61487 -> 10.0.0.227:51871 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:60189 -> 10.0.0.227:60319 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:61031 -> 10.0.0.227:50081 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:58469 -> 10.0.0.227:51362 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:65075 -> 10.0.0.227:56994 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:59850 -> 10.0.0.227:51364 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:49808 -> 10.0.0.227:56999 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:53271 -> 10.0.0.227:55726 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:63610 -> 10.0.0.227:58799 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:50832 -> 10.0.0.227:62389 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:55978 -> 10.0.0.227:51641 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:63682 -> 10.0.0.227:63163 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:60529 -> 10.0.0.227:52156 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:52856 -> 10.0.0.227:51139 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:56971 -> 10.0.0.227:56262 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:65176 -> 10.0.0.227:64200 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:52799 -> 10.0.0.227:59853 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:55641 -> 10.0.0.227:57040 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:61896 -> 10.0.0.227:59088 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:57012 -> 10.0.0.227:51922 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:63651 -> 10.0.0.227:59603 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:49926 -> 10.0.0.227:57301 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:51531 -> 10.0.0.227:58837 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:61048 -> 10.0.0.227:50908 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:65449 -> 10.0.0.227:53212 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:65418 -> 10.0.0.227:61660 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:64438 -> 10.0.0.227:54240 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:59239 -> 10.0.0.227:61664 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:50264 -> 10.0.0.227:55781 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:52700 -> 10.0.0.227:65000 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:65454 -> 10.0.0.227:64236 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:60994 -> 10.0.0.227:56558 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:62317 -> 10.0.0.227:63470 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:63877 -> 10.0.0.227:63983 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:51508 -> 10.0.0.227:55281 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:64790 -> 10.0.0.227:54770 -> 200.30.193.14:53 MULTIPLE:SINGLE
self udp 128.0.0.80:61356 -> 10.0.0.227:63223 -> 200.30.193.14:53 MULTIPLE:SINGLE
INFO:
Status: Enabled for 0 days 02:24:54 Debug: Urgent
Hostid: 0x8c85b0aa
State Table Total Rate
current entries 299
searches 1117501 128.5/s
inserts 4368 0.5/s
removals 4069 0.5/s
Counters
match 4608 0.5/s
bad-offset 0 0.0/s
fragment 0 0.0/s
short 0 0.0/s
normalize 0 0.0/s
memory 0 0.0/s
bad-timestamp 0 0.0/s
congestion 0 0.0/s
ip-option 0 0.0/s
proto-cksum 0 0.0/s
state-mismatch 6 0.0/s
state-insert 0 0.0/s
state-limit 0 0.0/s
src-limit 0 0.0/s
synproxy 0 0.0/s
TIMEOUTS:
tcp.first 120s
tcp.opening 30s
tcp.established 86400s
tcp.closing 900s
tcp.finwait 45s
tcp.closed 90s
tcp.tsdiff 30s
udp.first 60s
udp.single 30s
udp.multiple 60s
icmp.first 20s
icmp.error 10s
other.first 60s
other.single 30s
other.multiple 60s
frag 30s
interval 10s
adaptive.start 0 states
adaptive.end 0 states
src.track 0s
LIMITS:
states hard limit 10000
src-nodes hard limit 10000
frags hard limit 5000
TABLES:
sshnukes
OS FINGERPRINTS:
345 fingerprints loaded