Исходное сообщение
"SQUID transparent + PF" Отправлено sergeii01, 18-Ноя-08 14:56
Роутер 2 [root@router2 ~]# tcpdump -i em1 -ttt -e -n port 8080 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on em1, link-type EN10MB (Ethernet), capture size 96 bytes 000000 00:1e:4a:a9:d2:1c > 00:0e:a6:b6:cd:40, ethertype IPv4 (0x0800), length 62: 192.168.1.251.51073 > 192.168.3.59.8080: S 2956257227:2956257227(0) win 65535 <mss 1300,nop,nop,sackOK> 000037 00:0e:a6:b6:cd:40 > 00:14:5e:a4:f8:92, ethertype IPv4 (0x0800), length 62: 192.168.3.59.8080 > 192.168.1.251.51073: S 3309537150:3309537150(0) ack 2956257228 win 65535 <mss 1460,sackOK,eol> 000213 00:14:5e:a4:f8:92 > 00:0e:a6:b6:cd:40, ethertype IPv4 (0x0800), length 60: 192.168.1.251.51073 > 192.168.3.59.8080: R 2956257228:2956257228(0) win 0 2. 996740 00:1e:4a:a9:d2:1c > 00:0e:a6:b6:cd:40, ethertype IPv4 (0x0800), length 62: 192.168.1.251.60616 > 192.168.3.59.8080: S 2956257227:2956257227(0) win 65535 <mss 1300,nop,nop,sackOK> 000047 00:0e:a6:b6:cd:40 > 00:14:5e:a4:f8:92, ethertype IPv4 (0x0800), length 62: 192.168.3.59.8080 > 192.168.1.251.60616: S 423381392:423381392(0) ack 2956257228 win 65535 <mss 1460,sackOK,eol> 000196 00:14:5e:a4:f8:92 > 00:0e:a6:b6:cd:40, ethertype IPv4 (0x0800), length 60: 192.168.1.251.60616 > 192.168.3.59.8080: R 2956257228:2956257228(0) win 0 Роутер 1 [root@router /var/log]# tcpdump -i pflog0 -ttt -e host 192.168.3.59 tcpdump: WARNING: pflog0: no IPv4 address assigned tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on pflog0, link-type PFLOG (OpenBSD pflog file), capture size 96 bytes 538021 rule 0/0(match): pass in on bridge0: 192.168.3.79.interhdl_elmd > 192.168.3.59.8080: S 2956257227:2956257227(0) win 65535 <mss 1460,nop,nop,sackOK> 1.    000006 rule 0/0(match): pass out on bridge0: 192.168.3.79.interhdl_elmd > 192.168.3.59.8080: S 2956257227:2956257227(0) win 65535 <mss 1460,nop,nop,sackOK> 000004 rule 0/0(match): pass out on bge1: 192.168.3.79.interhdl_elmd > 192.168.3.59.8080: S 2956257227:2956257227(0) win 65535 <mss 1460,nop,nop,sackOK> 000648 rule 0/0(match): pass in on bge1: 192.168.3.79.interhdl_elmd > 192.168.3.59.8080: S 2956257227:2956257227(0) win 65535 <mss 1300,nop,nop,sackOK> 000005 rule 0/0(match): pass in on bridge0: 192.168.3.79.interhdl_elmd > 192.168.3.59.8080: S 2956257227:2956257227(0) win 65535 <mss 1300,nop,nop,sackOK> 000005 rule 0/0(match): pass out on bridge0: 192.168.3.79.interhdl_elmd > 192.168.3.59.8080: S 2956257227:2956257227(0) win 65535 <mss 1300,nop,nop,sackOK> 000007 rule 3/0(match): pass out on bge0: 192.168.1.251.51073 > 192.168.3.59.8080: S 2956257227:2956257227(0) win 65535 <mss 1300,nop,nop,sackOK> 2. 996507 rule 0/0(match): pass in on bridge0: 192.168.3.79.interhdl_elmd > 192.168.3.59.8080: S 2956257227:2956257227(0) win 65535 <mss 1460,nop,nop,sackOK> 000010 rule 3/0(match): pass out on bge1: 192.168.1.251.51073 > 192.168.3.59.8080: S 2956257227:2956257227(0) win 65535 <mss 1460,nop,nop,sackOK> 000513 rule 3/0(match): pass in on bge1: 192.168.1.251.51073 > 192.168.3.59.8080: S 2956257227:2956257227(0) win 65535 <mss 1300,nop,nop,sackOK> 000005 rule 3/0(match): pass in on bridge0: 192.168.1.251.51073 > 192.168.3.59.8080: S 2956257227:2956257227(0) win 65535 <mss 1300,nop,nop,sackOK> 000005 rule 3/0(match): pass out on bridge0: 192.168.1.251.51073 > 192.168.3.59.8080: S 2956257227:2956257227(0) win 65535 <mss 1300,nop,nop,sackOK> 000009 rule 3/0(match): pass out on bge0: 192.168.1.251.60616 > 192.168.3.59.8080: S 2956257227:2956257227(0) win 65535 <mss 1300,nop,nop,sackOK> Вот что получается :)