Jump to content

Question

Posted

Добрый день. Помогите разобраться постоянно идет поток в 30 - 40 Мбит на прием через интерфейс ISP. Клиенты трафик не потребляют. Добавление IP адреса источника 192.168.36.202 в межсетевой экран (правило на запрет) не помогает.

Приложен отчет по захвату пакетов на интерфейсе ISP с роутера:

Скрытый текст
No.     Time           Source                Destination           Protocol Length Info
      1 0.000000       192.168.36.202        235.10.10.71          MPEG TS  1358   50291 → 1234 Len=1316

Frame 1: 1358 bytes on wire (10864 bits), 1358 bytes captured (10864 bits)
Ethernet II, Src: Cisco_00:23:ff (00:25:84:00:23:ff), Dst: IPv4mcast_0a:0a:47 (01:00:5e:0a:0a:47)
Internet Protocol Version 4, Src: 192.168.36.202, Dst: 235.10.10.71
User Datagram Protocol, Src Port: 50291, Dst Port: 1234
ISO/IEC 13818-1 PID=0x49b CC=5
ISO/IEC 13818-1 PID=0x49a CC=15
ISO/IEC 13818-1 PID=0x49a CC=0
ISO/IEC 13818-1 PID=0x49a CC=1
ISO/IEC 13818-1 PID=0x49a CC=2
ISO/IEC 13818-1 PID=0x49a CC=3
ISO/IEC 13818-1 PID=0x49a CC=4

No.     Time           Source                Destination           Protocol Length Info
      2 0.000123       192.168.36.202        235.10.10.13          MPEG TS  1358   36297 → 1234 Len=1316 [MP2T fragment of a reassembled packet]

Frame 2: 1358 bytes on wire (10864 bits), 1358 bytes captured (10864 bits)
Ethernet II, Src: Cisco_00:23:ff (00:25:84:00:23:ff), Dst: IPv4mcast_0a:0a:0d (01:00:5e:0a:0a:0d)
Internet Protocol Version 4, Src: 192.168.36.202, Dst: 235.10.10.13
User Datagram Protocol, Src Port: 36297, Dst Port: 1234
ISO/IEC 13818-1 PID=0x7ef CC=11
[Reassembled in: 209]
ISO/IEC 13818-1 PID=0x7ef CC=12
[Reassembled in: 209]
ISO/IEC 13818-1 PID=0x7ef CC=13
[Reassembled in: 209]
ISO/IEC 13818-1 PID=0x7ef CC=14
[Reassembled in: 209]
ISO/IEC 13818-1 PID=0x7ef CC=15
[Reassembled in: 209]
ISO/IEC 13818-1 PID=0x7ef CC=0
[Reassembled in: 209]
ISO/IEC 13818-1 PID=0x7ef CC=1
[Reassembled in: 209]

No.     Time           Source                Destination           Protocol Length Info
      3 0.000219       192.168.36.202        235.10.10.104         MPEG TS  1358   Scrambled TS payload

Frame 3: 1358 bytes on wire (10864 bits), 1358 bytes captured (10864 bits)
Ethernet II, Src: Cisco_00:23:ff (00:25:84:00:23:ff), Dst: IPv4mcast_0a:0a:68 (01:00:5e:0a:0a:68)
Internet Protocol Version 4, Src: 192.168.36.202, Dst: 235.10.10.104
User Datagram Protocol, Src Port: 55877, Dst Port: 1234
ISO/IEC 13818-1 PID=0x821 CC=10
ISO/IEC 13818-1 PID=0x821 CC=11
ISO/IEC 13818-1 PID=0x821 CC=12
ISO/IEC 13818-1 PID=0x821 CC=13
ISO/IEC 13818-1 PID=0x821 CC=14
ISO/IEC 13818-1 PID=0x821 CC=15
ISO/IEC 13818-1 PID=0x822 CC=4

No.     Time           Source                Destination           Protocol Length Info
      4 0.000580       192.168.36.142        235.10.10.1           MPEG TS  1358   34224 → 1234 Len=1316

Frame 4: 1358 bytes on wire (10864 bits), 1358 bytes captured (10864 bits)
Ethernet II, Src: Cisco_00:23:ff (00:25:84:00:23:ff), Dst: IPv4mcast_0a:0a:01 (01:00:5e:0a:0a:01)
Internet Protocol Version 4, Src: 192.168.36.142, Dst: 235.10.10.1
User Datagram Protocol, Src Port: 34224, Dst Port: 1234
ISO/IEC 13818-1 PID=0x3f3 CC=1
ISO/IEC 13818-1 PID=0x3f3 CC=2
ISO/IEC 13818-1 PID=0x3f4 CC=4
ISO/IEC 13818-1 PID=0x3f3 CC=3
ISO/IEC 13818-1 PID=0x3f3 CC=4
ISO/IEC 13818-1 PID=0x3f3 CC=5
ISO/IEC 13818-1 PID=0x3f3 CC=6

No.     Time           Source                Destination           Protocol Length Info
      5 0.000722       192.168.36.202        235.10.10.141         MPEG TS  1358   Scrambled TS payload

Frame 5: 1358 bytes on wire (10864 bits), 1358 bytes captured (10864 bits)
Ethernet II, Src: Cisco_00:23:ff (00:25:84:00:23:ff), Dst: IPv4mcast_0a:0a:8d (01:00:5e:0a:0a:8d)
Internet Protocol Version 4, Src: 192.168.36.202, Dst: 235.10.10.141
User Datagram Protocol, Src Port: 38186, Dst Port: 1234
ISO/IEC 13818-1 PID=0x1a3 CC=10
ISO/IEC 13818-1 PID=0xdb CC=1
ISO/IEC 13818-1 PID=0xdb CC=2
ISO/IEC 13818-1 PID=0x0 CC=10
ISO/IEC 13818-1 PID=0x11 CC=11
ISO/IEC 13818-1 PID=0x77 CC=6
ISO/IEC 13818-1 PID=0x1a3 CC=11

No.     Time           Source                Destination           Protocol Length Info
      6 0.001342       192.168.36.202        235.10.10.132         MPEG TS  1358   Scrambled TS payload

Frame 6: 1358 bytes on wire (10864 bits), 1358 bytes captured (10864 bits)
Ethernet II, Src: Cisco_00:23:ff (00:25:84:00:23:ff), Dst: IPv4mcast_0a:0a:84 (01:00:5e:0a:0a:84)
Internet Protocol Version 4, Src: 192.168.36.202, Dst: 235.10.10.132
User Datagram Protocol, Src Port: 52681, Dst Port: 1234
ISO/IEC 13818-1 PID=0xcd CC=12
ISO/IEC 13818-1 PID=0x195 CC=10
ISO/IEC 13818-1 PID=0xcd CC=13
ISO/IEC 13818-1 PID=0xcd CC=14
ISO/IEC 13818-1 PID=0xcd CC=15
ISO/IEC 13818-1 PID=0x195 CC=11
ISO/IEC 13818-1 PID=0xcd CC=0

No.     Time           Source                Destination           Protocol Length Info
      7 0.001861       192.168.36.202        235.10.10.71          MPEG TS  1358   50291 → 1234 Len=1316 [MP2T fragment of a reassembled packet]

Frame 7: 1358 bytes on wire (10864 bits), 1358 bytes captured (10864 bits)
Ethernet II, Src: Cisco_00:23:ff (00:25:84:00:23:ff), Dst: IPv4mcast_0a:0a:47 (01:00:5e:0a:0a:47)
Internet Protocol Version 4, Src: 192.168.36.202, Dst: 235.10.10.71
User Datagram Protocol, Src Port: 50291, Dst Port: 1234
ISO/IEC 13818-1 PID=0x49a CC=5
ISO/IEC 13818-1 PID=0x49a CC=6
ISO/IEC 13818-1 PID=0x49a CC=7
ISO/IEC 13818-1 PID=0x49a CC=8
ISO/IEC 13818-1 PID=0x49a CC=9
ISO/IEC 13818-1 PID=0x49a CC=10
[Reassembled in: 23]
ISO/IEC 13818-1 PID=0x49a CC=11
[Reassembled in: 23]

No.     Time           Source                Destination           Protocol Length Info
      8 0.002019       192.168.36.202        235.10.10.2           MPEG TS  1358   42280 → 1234 Len=1316

Frame 8: 1358 bytes on wire (10864 bits), 1358 bytes captured (10864 bits)
Ethernet II, Src: Cisco_00:23:ff (00:25:84:00:23:ff), Dst: IPv4mcast_0a:0a:02 (01:00:5e:0a:0a:02)
Internet Protocol Version 4, Src: 192.168.36.202, Dst: 235.10.10.2
User Datagram Protocol, Src Port: 42280, Dst Port: 1234
ISO/IEC 13818-1 PID=0x3fe CC=1
ISO/IEC 13818-1 PID=0x3fd CC=13
ISO/IEC 13818-1 PID=0x3fd CC=14
ISO/IEC 13818-1 PID=0x3fd CC=15
ISO/IEC 13818-1 PID=0x3fd CC=0
ISO/IEC 13818-1 PID=0x3fd CC=1
ISO/IEC 13818-1 PID=0x3fd CC=2

No.     Time           Source                Destination           Protocol Length Info
      9 0.002119       192.168.36.202        235.10.10.10          MPEG TS  1358   53066 → 1234 Len=1316 [MP2T fragment of a reassembled packet]

Frame 9: 1358 bytes on wire (10864 bits), 1358 bytes captured (10864 bits)
Ethernet II, Src: Cisco_00:23:ff (00:25:84:00:23:ff), Dst: IPv4mcast_0a:0a:0a (01:00:5e:0a:0a:0a)
Internet Protocol Version 4, Src: 192.168.36.202, Dst: 235.10.10.10
User Datagram Protocol, Src Port: 53066, Dst Port: 1234
ISO/IEC 13818-1 PID=0x44d CC=3
ISO/IEC 13818-1 PID=0x44d CC=4
ISO/IEC 13818-1 PID=0x44d CC=5
ISO/IEC 13818-1 PID=0x44d CC=6
ISO/IEC 13818-1 PID=0x44d CC=7
ISO/IEC 13818-1 PID=0x44d CC=8
[Reassembled in: 84]
ISO/IEC 13818-1 PID=0x44d CC=9
[Reassembled in: 84]

No.     Time           Source                Destination           Protocol Length Info
     10 0.002263       192.168.36.202        235.10.10.16          MPEG TS  1358   39656 → 1234 Len=1316

Frame 10: 1358 bytes on wire (10864 bits), 1358 bytes captured (10864 bits)
Ethernet II, Src: Cisco_00:23:ff (00:25:84:00:23:ff), Dst: IPv4mcast_0a:0a:10 (01:00:5e:0a:0a:10)
Internet Protocol Version 4, Src: 192.168.36.202, Dst: 235.10.10.16
User Datagram Protocol, Src Port: 39656, Dst Port: 1234
ISO/IEC 13818-1 PID=0x80d CC=15
ISO/IEC 13818-1 PID=0x80d CC=0
ISO/IEC 13818-1 PID=0x80d CC=1
ISO/IEC 13818-1 PID=0x80d CC=2
ISO/IEC 13818-1 PID=0x80e CC=7
ISO/IEC 13818-1 PID=0x80d CC=3
ISO/IEC 13818-1 PID=0x80d CC=4

No.     Time           Source                Destination           Protocol Length Info
     11 0.002799       192.168.36.202        235.10.10.59          MPEG TS  1358   Scrambled TS payload

Frame 11: 1358 bytes on wire (10864 bits), 1358 bytes captured (10864 bits)
Ethernet II, Src: Cisco_00:23:ff (00:25:84:00:23:ff), Dst: IPv4mcast_0a:0a:3b (01:00:5e:0a:0a:3b)
Internet Protocol Version 4, Src: 192.168.36.202, Dst: 235.10.10.59
User Datagram Protocol, Src Port: 53387, Dst Port: 1234
ISO/IEC 13818-1 PID=0xcb CC=2
ISO/IEC 13818-1 PID=0xcb CC=3
ISO/IEC 13818-1 PID=0xcb CC=4
ISO/IEC 13818-1 PID=0xcb CC=5
ISO/IEC 13818-1 PID=0xcb CC=6
ISO/IEC 13818-1 PID=0xcb CC=7
ISO/IEC 13818-1 PID=0xcb CC=8

No.     Time           Source                Destination           Protocol Length Info
     12 0.003422       192.168.36.202        235.10.10.13          MPEG TS  1358   [MP2T fragment of a reassembled packet]

Frame 12: 1358 bytes on wire (10864 bits), 1358 bytes captured (10864 bits)
Ethernet II, Src: Cisco_00:23:ff (00:25:84:00:23:ff), Dst: IPv4mcast_0a:0a:0d (01:00:5e:0a:0a:0d)
Internet Protocol Version 4, Src: 192.168.36.202, Dst: 235.10.10.13
User Datagram Protocol, Src Port: 36297, Dst Port: 1234
ISO/IEC 13818-1 PID=0x7ef CC=2
[Reassembled in: 209]
ISO/IEC 13818-1 PID=0x7ef CC=3
[Reassembled in: 209]
ISO/IEC 13818-1 PID=0x7ef CC=4
[Reassembled in: 209]
ISO/IEC 13818-1 PID=0x7ef CC=5
[Reassembled in: 209]
ISO/IEC 13818-1 PID=0x7ef CC=6
[Reassembled in: 209]
ISO/IEC 13818-1 PID=0x7ef CC=7
[Reassembled in: 209]
ISO/IEC 13818-1 PID=0x7ef CC=8
[Reassembled in: 209]

No.     Time           Source                Destination           Protocol Length Info
     13 0.003528       192.168.36.202        235.10.10.69          MPEG TS  1358   Scrambled TS payload

Frame 13: 1358 bytes on wire (10864 bits), 1358 bytes captured (10864 bits)
Ethernet II, Src: Cisco_00:23:ff (00:25:84:00:23:ff), Dst: IPv4mcast_0a:0a:45 (01:00:5e:0a:0a:45)
Internet Protocol Version 4, Src: 192.168.36.202, Dst: 235.10.10.69
User Datagram Protocol, Src Port: 59330, Dst Port: 1234
ISO/IEC 13818-1 PID=0xd0 CC=2
ISO/IEC 13818-1 PID=0xd0 CC=3
ISO/IEC 13818-1 PID=0xd0 CC=4
ISO/IEC 13818-1 PID=0xd0 CC=5
ISO/IEC 13818-1 PID=0x1fc CC=8
ISO/IEC 13818-1 PID=0xd0 CC=6
ISO/IEC 13818-1 PID=0xd0 CC=7

No.     Time           Source                Destination           Protocol Length Info
     14 0.004024       192.168.36.142        235.10.10.1           MPEG TS  1358   34224 → 1234 Len=1316

Frame 14: 1358 bytes on wire (10864 bits), 1358 bytes captured (10864 bits)
Ethernet II, Src: Cisco_00:23:ff (00:25:84:00:23:ff), Dst: IPv4mcast_0a:0a:01 (01:00:5e:0a:0a:01)
Internet Protocol Version 4, Src: 192.168.36.142, Dst: 235.10.10.1
User Datagram Protocol, Src Port: 34224, Dst Port: 1234
ISO/IEC 13818-1 PID=0x3f3 CC=7
ISO/IEC 13818-1 PID=0x3f3 CC=8
ISO/IEC 13818-1 PID=0x3f3 CC=9
ISO/IEC 13818-1 PID=0x3f3 CC=10
ISO/IEC 13818-1 PID=0x3f3 CC=11
ISO/IEC 13818-1 PID=0x3f3 CC=12
ISO/IEC 13818-1 PID=0x3f3 CC=13

No.     Time           Source                Destination           Protocol Length Info
     15 0.004120       192.168.36.202        235.10.10.71          MPEG TS  1358   [MP2T fragment of a reassembled packet]

Frame 15: 1358 bytes on wire (10864 bits), 1358 bytes captured (10864 bits)
Ethernet II, Src: Cisco_00:23:ff (00:25:84:00:23:ff), Dst: IPv4mcast_0a:0a:47 (01:00:5e:0a:0a:47)
Internet Protocol Version 4, Src: 192.168.36.202, Dst: 235.10.10.71
User Datagram Protocol, Src Port: 50291, Dst Port: 1234
ISO/IEC 13818-1 PID=0x49a CC=12
[Reassembled in: 23]
ISO/IEC 13818-1 PID=0x49a CC=13
[Reassembled in: 23]
ISO/IEC 13818-1 PID=0x49a CC=14
[Reassembled in: 23]
ISO/IEC 13818-1 PID=0x49a CC=15
[Reassembled in: 23]
ISO/IEC 13818-1 PID=0x49a CC=0
[Reassembled in: 23]
ISO/IEC 13818-1 PID=0x49a CC=1
[Reassembled in: 23]
ISO/IEC 13818-1 PID=0x49a CC=2
[Reassembled in: 23]

 

 

1 answer to this question

Recommended Posts

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Answer this question...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...