Community College of Baltimore County Firewall Filter Analysis Report Using any tool of your choice, analyze the attached “Firewall Filter.log” from a pfSe

Community College of Baltimore County Firewall Filter Analysis Report Using any tool of your choice, analyze the attached “Firewall Filter.log” from a pfSense firewall and tell me several things about what transpired, for example what IP addresses are involved, standard ports used, any suspicious behaviors, etc. What do you think went on? Prepare your findings in a report format and submit it before the class week ends. For your knowledge: The internal network is 192.168.100.0/24 Any references to 192.168.100.134 or .136 are internal users. The firewall LAN interface (gateway) is 192.168.100.10. The WAN interface is assigned 192.168.100.1. 68.100.1.43296 > 192.168.100.10.1524: Flags [S], cksum 0x68f7 (correct), seq
1895349701, win 2048, options [mss 1460], length 0
Oct 1 19:56:00 pfSense pf: 00:00:00.000066 rule 33/0(match): pass in on em0: (tos
0x0, ttl 57, id 37529, offset 0, flags [none], proto TCP (6), length 44)
Oct 1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.60020: Flags
[S], cksum 0x8476 (correct), seq 1895349701, win 2048, options [mss 1460], length 0
Oct 1 19:56:00 pfSense pf: 00:00:00.000066 rule 33/0(match): pass in on em0: (tos
0x0, ttl 44, id 61370, offset 0, flags [none], proto TCP (6), length 44)
Oct 1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.1119: Flags
[S], cksum 0x6e8d (correct), seq 1895415236, win 1024, options [mss 1460], length 0
Oct 1 19:56:00 pfSense pf: 00:00:00.000066 rule 33/0(match): pass in on em0: (tos
0x0, ttl 40, id 41649, offset 0, flags [none], proto TCP (6), length 44)
Oct 1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.1503: Flags
[S], cksum 0x6d0d (correct), seq 1895415236, win 1024, options [mss 1460], length 0
Oct 1 19:56:00 pfSense pf: 00:00:00.000050 rule 33/0(match): pass in on em0: (tos
0x0, ttl 48, id 13593, offset 0, flags [none], proto TCP (6), length 44)
Oct 1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.32781: Flags
[S], cksum 0xf2de (correct), seq 1895415236, win 1024, options [mss 1460], length 0
Oct 1 19:56:00 pfSense pf: 00:00:00.000052 rule 33/0(match): pass in on em0: (tos
0x0, ttl 55, id 12406, offset 0, flags [none], proto TCP (6), length 44)
Oct 1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.6566: Flags
[S], cksum 0x4d46 (correct), seq 1895415236, win 4096, options [mss 1460], length 0
Oct 1 19:56:00 pfSense pf: 00:00:00.000065 rule 33/0(match): pass in on em0: (tos
0x0, ttl 37, id 50591, offset 0, flags [none], proto TCP (6), length 44)
Oct 1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.4129: Flags
[S], cksum 0x5ecb (correct), seq 1895415236, win 2048, options [mss 1460], length 0
Oct 1 19:56:00 pfSense pf: 00:00:00.000052 rule 33/0(match): pass in on em0: (tos
0x0, ttl 55, id 1948, offset 0, flags [none], proto TCP (6), length 44)
Oct 1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.5544: Flags
[S], cksum 0x5144 (correct), seq 1895415236, win 4096, options [mss 1460], length 0
Oct 1 19:56:00 pfSense pf: 00:00:00.000052 rule 33/0(match): pass in on em0: (tos
0x0, ttl 54, id 27640, offset 0, flags [none], proto TCP (6), length 44)
Oct 1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.11110: Flags
[S], cksum 0x3f86 (correct), seq 1895415236, win 3072, options [mss 1460], length 0
Oct 1 19:56:00 pfSense pf: 00:00:00.000074 rule 33/0(match): pass in on em0: (tos
0x0, ttl 40, id 34180, offset 0, flags [none], proto TCP (6), length 44)
Oct 1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.5269: Flags
[S], cksum 0x5e57 (correct), seq 1895415236, win 1024, options [mss 1460], length 0
Oct 1 19:56:00 pfSense pf: 00:00:00.001430 rule 33/0(match): pass in on em0: (tos
0x0, ttl 49, id 4229, offset 0, flags [none], proto TCP (6), length 44)
Oct 1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.2301: Flags
[S], cksum 0x65ee (correct), seq 1895349701, win 2048, options [mss 1460], length 0
Oct 1 19:56:00 pfSense pf: 00:00:00.000143 rule 33/0(match): pass in on em0: (tos
0x0, ttl 37, id 3630, offset 0, flags [none], proto TCP (6), length 44)
Oct 1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.2046: Flags
[S], cksum 0x66ed (correct), seq 1895349701, win 2048, options [mss 1460], length 0
Oct 1 19:56:00 pfSense pf: 00:00:00.000093 rule 33/0(match): pass in on em0: (tos
0x0, ttl 43, id 22464, offset 0, flags [none], proto TCP (6), length 44)
Oct 1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.541: Flags
[S], cksum 0x64ce (correct), seq 1895349701, win 4096, options [mss 1460], length 0
Oct 1 19:56:00 pfSense pf: 00:00:00.000185 rule 33/0(match): pass in on em0: (tos
0x0, ttl 58, id 7040, offset 0, flags [none], proto TCP (6), length 44)
Oct 1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.5631: Flags
[S], cksum 0x54ec (correct), seq 1895349701, win 3072, options [mss 1460], length 0
Oct 1 19:56:00 pfSense pf: 00:00:00.000082 rule 33/0(match): pass in on em0: (tos
0x0, ttl 38, id 7858, offset 0, flags [none], proto TCP (6), length 44)
Oct 1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.1864: Flags
[S], cksum 0x63a3 (correct), seq 1895349701, win 3072, options [mss 1460], length 0
Oct 1 19:56:00 pfSense pf: 00:00:00.000154 rule 33/0(match): pass in on em0: (tos
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
ttl 38, id 54423, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.49165: Flags
cksum 0xaade (correct), seq 1895415236, win 3072, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000052 rule 33/0(match): pass in on em0: (tos
ttl 55, id 57212, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.1164: Flags
cksum 0x6260 (correct), seq 1895415236, win 4096, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000052 rule 33/0(match): pass in on em0: (tos
ttl 56, id 28533, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.5998: Flags
cksum 0x5b7e (correct), seq 1895415236, win 1024, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000053 rule 33/0(match): pass in on em0: (tos
ttl 41, id 63371, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.63331: Flags
cksum 0x7788 (correct), seq 1895415236, win 2048, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.001645 rule 33/0(match): pass in on em0: (tos
ttl 47, id 53822, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.27353: Flags
cksum 0xfc11 (correct), seq 1895349701, win 4096, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000194 rule 33/0(match): pass in on em0: (tos
ttl 50, id 45443, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.407: Flags
cksum 0x6954 (correct), seq 1895349701, win 3072, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000080 rule 33/0(match): pass in on em0: (tos
ttl 46, id 47358, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.13722: Flags
cksum 0x3551 (correct), seq 1895349701, win 3072, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000101 rule 33/0(match): pass in on em0: (tos
ttl 38, id 42156, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.8000: Flags
cksum 0x4bab (correct), seq 1895349701, win 3072, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000116 rule 33/0(match): pass in on em0: (tos
ttl 53, id 63667, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.1783: Flags
cksum 0x67f4 (correct), seq 1895349701, win 2048, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.097183 rule 33/0(match): pass in on em0: (tos
ttl 50, id 58825, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.5269: Flags
cksum 0x5656 (correct), seq 1895349701, win 3072, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000119 rule 33/0(match): pass in on em0: (tos
ttl 41, id 11322, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.11110: Flags
cksum 0x4385 (correct), seq 1895349701, win 2048, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000091 rule 33/0(match): pass in on em0: (tos
ttl 42, id 8021, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.5544: Flags
cksum 0x5543 (correct), seq 1895349701, win 3072, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000173 rule 33/0(match): pass in on em0: (tos
ttl 46, id 54393, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.4129: Flags
cksum 0x5aca (correct), seq 1895349701, win 3072, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000124 rule 33/0(match): pass in on em0: (tos
ttl 41, id 27299, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.6566: Flags
cksum 0x5545 (correct), seq 1895349701, win 2048, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000056 rule 33/0(match): pass in on em0: (tos
ttl 43, id 62532, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.32781: Flags
cksum 0xe6dd (correct), seq 1895349701, win 4096, options [mss 1460], length 0
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
1 19:56:00 pfSense pf: 00:00:00.000054 rule 33/0(match): pass in on em0: (tos
ttl 59, id 35035, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.1503: Flags
cksum 0x610c (correct), seq 1895349701, win 4096, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000053 rule 33/0(match): pass in on em0: (tos
ttl 44, id 57541, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.1119: Flags
cksum 0x6e8c (correct), seq 1895349701, win 1024, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000328 rule 33/0(match): pass in on em0: (tos
ttl 39, id 41106, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.1233: Flags
cksum 0x621b (correct), seq 1895415236, win 4096, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000044 rule 33/0(match): pass in on em0: (tos
ttl 47, id 2840, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.3945: Flags
cksum 0x5783 (correct), seq 1895415236, win 4096, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000002 rule 33/0(match): pass in on em0: (tos
ttl 50, id 56714, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.7443: Flags
cksum 0x4dd9 (correct), seq 1895415236, win 3072, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000002 rule 33/0(match): pass in on em0: (tos
ttl 41, id 17013, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.1111: Flags
cksum 0x6a95 (correct), seq 1895415236, win 2048, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000002 rule 33/0(match): pass in on em0: (tos
ttl 49, id 29473, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.15660: Flags
cksum 0x31c0 (correct), seq 1895415236, win 2048, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.001326 rule 33/0(match): pass in on em0: (tos
ttl 57, id 55987, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.63331: Flags
cksum 0x7787 (correct), seq 1895349701, win 2048, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000144 rule 33/0(match): pass in on em0: (tos
ttl 56, id 38940, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.5998: Flags
cksum 0x5b7d (correct), seq 1895349701, win 1024, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000094 rule 33/0(match): pass in on em0: (tos
ttl 39, id 19822, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.1164: Flags
cksum 0x625f (correct), seq 1895349701, win 4096, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000182 rule 33/0(match): pass in on em0: (tos
ttl 56, id 33759, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.49165: Flags
cksum 0xb2dd (correct), seq 1895349701, win 1024, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000197 rule 33/0(match): pass in on em0: (tos
ttl 43, id 14042, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.1132: Flags
cksum 0x6280 (correct), seq 1895415236, win 4096, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000055 rule 33/0(match): pass in on em0: (tos
ttl 44, id 54046, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.6004: Flags
cksum 0x5b78 (correct), seq 1895415236, win 1024, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000053 rule 33/0(match): pass in on em0: (tos
ttl 43, id 40433, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.3690: Flags
cksum 0x5882 (correct), seq 1895415236, win 4096, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000052 rule 33/0(match): pass in on em0: (tos
ttl 39, id 1144, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.425: Flags
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
cksum 0x6543 (correct), seq 1895415236, win 4096, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000055 rule 33/0(match): pass in on em0: (tos
ttl 54, id 7106, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.3851: Flags
cksum 0x5be1 (correct), seq 1895415236, win 3072, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.001829 rule 33/0(match): pass in on em0: (tos
ttl 58, id 45428, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.254: Flags
cksum 0x69ee (correct), seq 1895415236, win 3072, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000121 rule 33/0(match): pass in on em0: (tos
ttl 49, id 62288, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.5004: Flags
cksum 0x5b60 (correct), seq 1895415236, win 2048, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000092 rule 33/0(match): pass in on em0: (tos
ttl 59, id 6193, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.9666: Flags
cksum 0x412a (correct), seq 1895415236, win 4096, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000167 rule 33/0(match): pass in on em0: (tos
ttl 40, id 62234, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.8010: Flags
cksum 0x53a2 (correct), seq 1895415236, win 1024, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000118 rule 33/0(match): pass in on em0: (tos
ttl 54, id 36922, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.9418: Flags
cksum 0x4622 (correct), seq 1895415236, win 3072, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.097058 rule 33/0(match): pass in on em0: (tos
ttl 50, id 37827, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.15660: Flags
cksum 0x2dbf (correct), seq 1895349701, win 3072, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000510 rule 33/0(match): pass in on em0: (tos
ttl 52, id 40786, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.1111: Flags
cksum 0x6e94 (correct), seq 1895349701, win 1024, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000385 rule 33/0(match): pass in on em0: (tos
ttl 55, id 30898, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.7443: Flags
cksum 0x49d8 (correct), seq 1895349701, win 4096, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000403 rule 33/0(match): pass in on em0: (tos
ttl 43, id 33473, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.3945: Flags
cksum 0x5782 (correct), seq 1895349701, win 4096, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000379 rule 33/0(match): pass in on em0: (tos
ttl 37, id 20898, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43296 > 192.168.100.10.1233: Flags
cksum 0x6a1a (correct), seq 1895349701, win 2048, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000698 rule 33/0(match): pass in on em0: (tos
ttl 44, id 53232, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.5221: Flags
cksum 0x5e87 (correct), seq 1895415236, win 1024, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000416 rule 33/0(match): pass in on em0: (tos
ttl 42, id 53727, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.9110: Flags
cksum 0x4756 (correct), seq 1895415236, win 3072, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000372 rule 33/0(match): pass in on em0: (tos
ttl 53, id 44915, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.711: Flags
cksum 0x6c25 (correct), seq 1895415236, win 2048, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000375 rule 33/0(match): pass in on em0: (tos
ttl 55, id 4453, offset 0, flags [none], proto TCP (6), length 44)
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
0x0,
Oct
[S],
Oct
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.2323: Flags
cksum 0x5dd9 (correct), seq 1895415236, win 4096, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000361 rule 33/0(match): pass in on em0: (tos
ttl 44, id 48263, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.1244: Flags
cksum 0x6e10 (correct), seq 1895415236, win 1024, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000339 rule 33/0(match): pass in on em0: (tos
ttl 49, id 16547, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.7103: Flags
cksum 0x532d (correct), seq 1895415236, win 2048, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000615 rule 33/0(match): pass in on em0: (tos
ttl 51, id 21991, offset 0, flags [none], proto TCP (6), length 44)
1 19:56:00 pfSense pf:
192.168.100.1.43295 > 192.168.100.10.20828: Flags
cksum 0x1590 (correct), seq 1895415236, win 4096, options [mss 1460], length 0
1 19:56:00 pfSense pf: 00:00:00.000380 rule 33/0(match): pass in on em0: (tos
ttl 53, id 26937, offset 0, flags [none], proto TCP …
Purchase answer to see full
attachment