https://pastein.ru/t/GHS
Загрузка данных
n.razhev@n-razhev ~ % >....
tb_if=$(/sbin/route -n get "$tb_target" | awk '/interface:/{print $2}')
if [ "$tb_if" != utun10 ]; then
echo "Stop: $tb_target currently uses $tb_if, not utun10."
exit 1
fi
done
sudo -v || exit 1
date -u
netstat -an -p tcp | awk '/194[.]186[.]63[.]/ && /ESTABLISHED/ {print}'
sudo -n /bin/sh <<'TB_CAPTURE' &
tb_pids=''
tb_cleanup() {
trap - EXIT
kill -INT $tb_pids 2>/dev/null || :
sleep 1
kill -KILL $tb_pids 2>/dev/null || :
wait $tb_pids 2>/dev/null || :
}
trap tb_cleanup EXIT
trap 'exit 130' HUP INT TERM
/usr/sbin/tcpdump -p --immediate-mode -l -nn -tttt -S -K -i utun10 -y NULL -s 44 -c 30 'ip and tcp and host 10.12.165.142 and port 8443' &
tb_pids="$tb_pids $!"
/usr/sbin/tcpdump -p --immediate-mode -l -nn -tttt -q -K -i utun10 -y NULL -s 32 -c 20 'ip and udp and host 172.21.0.1 and port 53' &
tb_pids="$tb_pids $!"
/usr/sbin/tcpdump -p --immediate-mode -l -nn -tttt -S -K -i bridge0 -y EN10MB -s 54 -c 80 'ip and tcp and net 194.186.63.0/24 and port 443 and host 192.168.77.2' &
tb_pids="$tb_pids $!"
sleep 15
TB_CAPTURE
tb_capture_job=$!
sleep 2
echo 'JSS TCP probe:'
/usr/bin/nc -4 -n -z -v -G 6 -w 6 10.12.165.142 8443
echo 'Corporate DNS probe:'
/usr/bin/dig @172.21.0.1 jss.corp.mail.ru A +time=4 +tries=1 +notcp +ignore +noall +comments +answer
netstat -an -p tcp | awk '/194[.]186[.]63[.]/ && /ESTABLISHED/ {print}'
wait "$tb_capture_job"
date -u
for tb_target in 10.12.165.142 172.21.0.1; do
/sbin/route -n get "$tb_target" | awk '/route to:|interface:/{print}'
done
echo 'Diagnostic finished; all packet captures stopped.'
)
Password:
Tue Oct 6 12:26:07 UTC 2026
tcp4 0 72678 192.168.77.2.57864 194.186.63.21.443 ESTABLISHED
tcpdump: data link type NULL
tcpdump: data link type NULL
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on utun10, link-type NULL (BSD loopback), snapshot length 32 bytes
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on utun10, link-type NULL (BSD loopback), snapshot length 44 bytes
tcpdump: data link type EN10MB
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on bridge0, link-type EN10MB (Ethernet), snapshot length 54 bytes
2026-10-06 15:26:07.454675 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], seq 3204625212:3204626440, ack 3833924982, win 2048, options [ [|tcp]
2026-10-06 15:26:07.685185 IP 172.21.49.196.64123 > 172.21.0.1.53: UDP, length 42
2026-10-06 15:26:07.685438 IP 172.21.49.196.56085 > 172.21.0.1.53: UDP, length 38
2026-10-06 15:26:07.685586 IP 172.21.49.196.53199 > 172.21.0.1.53: UDP, length 36
2026-10-06 15:26:07.685716 IP 172.21.49.196.62658 > 172.21.0.1.53: UDP, length 40
2026-10-06 15:26:07.685838 IP 172.21.49.196.51653 > 172.21.0.1.53: UDP, length 47
2026-10-06 15:26:07.685949 IP 172.21.49.196.62388 > 172.21.0.1.53: UDP, length 37
2026-10-06 15:26:07.686089 IP 172.21.49.196.56575 > 172.21.0.1.53: UDP, length 39
2026-10-06 15:26:07.686204 IP 172.21.49.196.53417 > 172.21.0.1.53: UDP, length 36
2026-10-06 15:26:07.686321 IP 172.21.49.196.63315 > 172.21.0.1.53: UDP, length 40
2026-10-06 15:26:07.686507 IP 172.21.49.196.53472 > 172.21.0.1.53: UDP, length 39
2026-10-06 15:26:07.686627 IP 172.21.49.196.56943 > 172.21.0.1.53: UDP, length 46
2026-10-06 15:26:07.864897 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], ack 3204626440, win 1114, options [ [|tcp]
2026-10-06 15:26:07.864902 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [P.], seq 3833924982:3833925152, ack 3204626440, win 1114, options [ [|tcp]
2026-10-06 15:26:07.865015 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], seq 3204626440:3204628896, ack 3833924982, win 2048, options [ [|tcp]
2026-10-06 15:26:07.865061 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], seq 3833925152:3833926380, ack 3204626440, win 1114, options [ [|tcp]
2026-10-06 15:26:07.865090 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833926380, win 2027, options [ [|tcp]
2026-10-06 15:26:07.865240 IP 172.21.0.1.53 > 172.21.49.196.63922: UDP, length 116
2026-10-06 15:26:07.865345 IP 172.21.0.1.53 > 172.21.49.196.58261: UDP, length 107
2026-10-06 15:26:07.865398 IP 172.21.0.1.53 > 172.21.49.196.52845: UDP, length 116
2026-10-06 15:26:07.865453 IP 172.21.0.1.53 > 172.21.49.196.65087: UDP, length 98
2026-10-06 15:26:07.865528 IP 172.21.0.1.53 > 172.21.49.196.58299: UDP, length 102
2026-10-06 15:26:07.865545 IP 172.21.0.1.53 > 172.21.49.196.55879: UDP, length 102
2026-10-06 15:26:07.865667 IP 172.21.0.1.53 > 172.21.49.196.54827: UDP, length 127
2026-10-06 15:26:07.865838 IP 172.21.0.1.53 > 172.21.49.196.59356: UDP, length 156
2026-10-06 15:26:07.866130 IP 172.21.49.196.58261 > 172.21.0.1.53: UDP, length 51
20 packets captured
22 packets received by filter
0 packets dropped by kernel
2026-10-06 15:26:08.379640 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [P.], seq 3833926380:3833927225, ack 3204626440, win 1114, options [ [|tcp]
2026-10-06 15:26:08.379645 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], ack 3204626440, win 1133, options [ [|tcp]
2026-10-06 15:26:08.379749 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833927225, win 2035, options [ [|tcp]
2026-10-06 15:26:08.594716 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], seq 3204626440:3204627668, ack 3833927225, win 2048, options [ [|tcp]
2026-10-06 15:26:09.001523 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], ack 3204627668, win 1155, options [ [|tcp]
2026-10-06 15:26:09.001530 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [P.], seq 3833927225:3833927343, ack 3204627668, win 1155, options [ [|tcp]
2026-10-06 15:26:09.001664 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], seq 3204627668:3204630124, ack 3833927225, win 2048, options [ [|tcp]
2026-10-06 15:26:09.001725 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], seq 3833927343:3833928571, ack 3204627668, win 1155, options [ [|tcp]
2026-10-06 15:26:09.001774 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833928571, win 2027, options [ [|tcp]
JSS TCP probe:
2026-10-06 15:26:09.189057 IP 172.21.49.196.57881 > 10.12.165.142.8443: Flags [SEW], seq 2750373020, win 65535, options [ [|tcp]
2026-10-06 15:26:09.343359 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], ack 3204627668, win 1175, options [ [|tcp]
2026-10-06 15:26:09.345345 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [P.], seq 3833928571:3833929150, ack 3204627668, win 1175, options [ [|tcp]
2026-10-06 15:26:09.345425 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833929150, win 2039, options [ [|tcp]
2026-10-06 15:26:09.717844 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], seq 3204627668:3204628896, ack 3833929150, win 2048, options [ [|tcp]
2026-10-06 15:26:10.061945 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], ack 3204628896, win 1197, options [ [|tcp]
2026-10-06 15:26:10.061950 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [P.], seq 3833929150:3833929309, ack 3204628896, win 1197, options [ [|tcp]
2026-10-06 15:26:10.062015 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], seq 3204628896:3204631352, ack 3833929150, win 2048, options [ [|tcp]
2026-10-06 15:26:10.062123 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833929309, win 2048, options [ [|tcp]
2026-10-06 15:26:10.063031 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], seq 3833929309:3833930537, ack 3204628896, win 1197, options [ [|tcp]
2026-10-06 15:26:10.189267 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833930537, win 2048, options [ [|tcp]
2026-10-06 15:26:10.189271 IP 172.21.49.196.57881 > 10.12.165.142.8443: Flags [S], seq 2750373020, win 65535, options [ [|tcp]
2026-10-06 15:26:10.408377 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], ack 3204628896, win 1216, options [ [|tcp]
2026-10-06 15:26:10.408380 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [P.], seq 3833930537:3833931219, ack 3204628896, win 1216, options [ [|tcp]
2026-10-06 15:26:10.408425 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833931219, win 2038, options [ [|tcp]
2026-10-06 15:26:10.785356 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], seq 3204628896:3204630124, ack 3833931219, win 2048, options [ [|tcp]
2026-10-06 15:26:11.190131 IP 172.21.49.196.57881 > 10.12.165.142.8443: Flags [S], seq 2750373020, win 65535, options [ [|tcp]
2026-10-06 15:26:11.239488 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], ack 3204630124, win 1239, options [ [|tcp]
2026-10-06 15:26:11.239491 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [P.], seq 3833931219:3833931372, ack 3204630124, win 1239, options [ [|tcp]
2026-10-06 15:26:11.239492 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], seq 3833931372:3833932600, ack 3204630124, win 1239, options [ [|tcp]
2026-10-06 15:26:11.239540 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], seq 3204630124:3204632580, ack 3833931219, win 2048, options [ [|tcp]
2026-10-06 15:26:11.239556 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833931372, win 2046, options [ [|tcp]
2026-10-06 15:26:11.239565 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833932600, win 2027, options [ [|tcp]
2026-10-06 15:26:11.585863 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], ack 3204630124, win 1258, options [ [|tcp]
2026-10-06 15:26:11.585995 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [P.], seq 3833932600:3833933610, ack 3204630124, win 1258, options [ [|tcp]
2026-10-06 15:26:11.586019 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833933610, win 2033, options [ [|tcp]
2026-10-06 15:26:12.007358 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], seq 3204630124:3204631352, ack 3833933610, win 2048, options [ [|tcp]
2026-10-06 15:26:12.191921 IP 172.21.49.196.57881 > 10.12.165.142.8443: Flags [S], seq 2750373020, win 65535, options [ [|tcp]
2026-10-06 15:26:12.350304 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], ack 3204631352, win 1281, options [ [|tcp]
2026-10-06 15:26:12.350416 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], seq 3204631352:3204633808, ack 3833933610, win 2048, options [ [|tcp]
2026-10-06 15:26:12.350446 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [P.], seq 3833933610:3833933761, ack 3204631352, win 1281, options [ [|tcp]
2026-10-06 15:26:12.350446 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], seq 3833933761:3833934989, ack 3204631352, win 1281, options [ [|tcp]
2026-10-06 15:26:12.350488 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833933761, win 2046, options [ [|tcp]
2026-10-06 15:26:12.350535 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833934989, win 2027, options [ [|tcp]
2026-10-06 15:26:12.778078 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [P.], seq 3833934989:3833935849, ack 3204631352, win 1281, options [ [|tcp]
2026-10-06 15:26:12.778182 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833935849, win 2035, options [ [|tcp]
2026-10-06 15:26:12.778642 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], ack 3204631352, win 1300, options [ [|tcp]
2026-10-06 15:26:13.118516 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], seq 3204631352:3204632580, ack 3833935849, win 2048, options [ [|tcp]
2026-10-06 15:26:13.192709 IP 172.21.49.196.57881 > 10.12.165.142.8443: Flags [S], seq 2750373020, win 65535, options [ [|tcp]
2026-10-06 15:26:13.599185 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], ack 3204632580, win 1323, options [ [|tcp]
2026-10-06 15:26:13.599194 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [P.], seq 3833935849:3833936014, ack 3204632580, win 1323, options [ [|tcp]
2026-10-06 15:26:13.599195 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], seq 3833936014:3833937242, ack 3204632580, win 1323, options [ [|tcp]
2026-10-06 15:26:13.599332 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], seq 3204632580:3204635036, ack 3833935849, win 2048, options [ [|tcp]
2026-10-06 15:26:13.599397 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833936014, win 2046, options [ [|tcp]
2026-10-06 15:26:13.599438 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833937242, win 2027, options [ [|tcp]
2026-10-06 15:26:14.107202 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [P.], seq 3833937242:3833938092, ack 3204632580, win 1323, options [ [|tcp]
2026-10-06 15:26:14.107208 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], ack 3204632580, win 1342, options [ [|tcp]
2026-10-06 15:26:14.107314 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833938092, win 2035, options [ [|tcp]
2026-10-06 15:26:14.193954 IP 172.21.49.196.57881 > 10.12.165.142.8443: Flags [S], seq 2750373020, win 65535, options [ [|tcp]
2026-10-06 15:26:14.428534 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], seq 3204632580:3204633808, ack 3833938092, win 2048, options [ [|tcp]
2026-10-06 15:26:14.773483 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], ack 3204633808, win 1365, options [ [|tcp]
2026-10-06 15:26:14.773618 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], seq 3204633808:3204636264, ack 3833938092, win 2048, options [ [|tcp]
2026-10-06 15:26:14.773911 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [P.], seq 3833938092:3833938253, ack 3204633808, win 1365, options [ [|tcp]
2026-10-06 15:26:14.773993 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833938253, win 2046, options [ [|tcp]
2026-10-06 15:26:14.774035 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], seq 3833938253:3833939481, ack 3204633808, win 1365, options [ [|tcp]
2026-10-06 15:26:14.774081 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833939481, win 2027, options [ [|tcp]
2026-10-06 15:26:14.774411 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], seq 3833939481:3833940709, ack 3204633808, win 1365, options [ [|tcp]
2026-10-06 15:26:14.774498 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833940709, win 2029, options [ [|tcp]
2026-10-06 15:26:15.135106 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [P.], seq 3833940709:3833941089, ack 3204633808, win 1365, options [ [|tcp]
2026-10-06 15:26:15.135112 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], ack 3204633808, win 1384, options [ [|tcp]
2026-10-06 15:26:15.135213 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833941089, win 2043, options [ [|tcp]
nc: connectx to 10.12.165.142 port 8443 (tcp) failed: Operation timed out
Corporate DNS probe:
2026-10-06 15:26:15.591312 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], seq 3204633808:3204635036, ack 3833941089, win 2048, options [ [|tcp]
2026-10-06 15:26:16.060129 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], ack 3204635036, win 1406, options [ [|tcp]
2026-10-06 15:26:16.060140 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [P.], seq 3833941089:3833941500, ack 3204635036, win 1406, options [ [|tcp]
2026-10-06 15:26:16.060140 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], seq 3833941500:3833942728, ack 3204635036, win 1406, options [ [|tcp]
2026-10-06 15:26:16.060141 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [.], seq 3833942728:3833943956, ack 3204635036, win 1406, options [ [|tcp]
2026-10-06 15:26:16.060242 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], seq 3204635036:3204637492, ack 3833941089, win 2048, options [ [|tcp]
2026-10-06 15:26:16.060281 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833941500, win 2042, options [ [|tcp]
2026-10-06 15:26:16.060301 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833943956, win 2004, options [ [|tcp]
2026-10-06 15:26:16.060626 IP 192.168.77.2.57864 > 194.186.63.21.443: Flags [.], ack 3833943956, win 2048, options [ [|tcp]
2026-10-06 15:26:16.403075 IP 194.186.63.21.443 > 192.168.77.2.57864: Flags [P.], seq 3833943956:3833944515, ack 3204635036, win 1406, options [ [|tcp]
80 packets captured
84 packets received by filter
0 packets dropped by kernel
; <<>> DiG 9.10.6 <<>> @172.21.0.1 jss.corp.mail.ru A +time=4 +tries=1 +notcp +ignore +noall +comments +answer
; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached
tcp4 0 84144 192.168.77.2.57864 194.186.63.21.443 ESTABLISHED
6 packets captured
539 packets received by filter
0 packets dropped by kernel
Tue Oct 6 12:26:23 UTC 2026
route to: 10.12.165.142
interface: utun10
route to: 172.21.0.1
interface: utun10
Diagnostic finished; all packet captures stopped.