Solving Libvirt virtualization issues under grsecurity RBAC (1)
( This page might be replaced, it's probably of little use and incomplete, and also unnecessary parts have not been removed. )
03:28:29 g0n kernel: [ 330.751495] grsec: (miro:U:/) exec of
/usr/local/bin/uncenz-1st (uncenz-1st ) by /usr/local/bin/uncenz-1st[bash:4684]
uid/euid:1000/1000 gid/egid:1000/1000, parent /bin/bash[bash:4556]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:29 g0n kernel: [ 330.760843] grsec: (miro:U:/bin/cat) exec of /bin/cat
(cat .uncenz-dumper_permanent ) by /bin/cat[uncenz-1st:4687] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4684]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:30 g0n kernel: [ 331.621719] grsec: (miro:U:/usr/bin/gpg2) exec of
/usr/bin/gpg2 (gpg --list-secret-keys --with-colon ) by
/usr/bin/gpg2[uncenz-1st:4688] uid/euid:1000/1000 gid/egid:1000/1000, parent
/usr/local/bin/uncenz-1st[uncenz-1st:4684] uid/euid:1000/1000
gid/egid:1000/1000
03:28:30 g0n kernel: [ 331.792279] grsec: (miro:U:/usr/bin/gpg2) chdir to / by
/usr/bin/gpg2[gpg:4689] uid/euid:1000/1000 gid/egid:1000/1000, parent
/usr/bin/gpg2[gpg:4688] uid/euid:1000/1000 gid/egid:1000/1000
03:28:30 g0n kernel: [ 331.794808] grsec: (miro:U:/usr/bin/gpg-agent) exec of
/usr/bin/gpg-agent (gpg-agent --homedir /home/miro/.gnupg --use-standard-socket
--daemon ) by /usr/bin/gpg-agent[gpg:4690] uid/euid:1000/1000
gid/egid:1000/1000, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0
03:28:31 g0n kernel: [ 331.838415] grsec: (miro:U:/usr/bin/gpg-agent) chdir to
/ by /usr/bin/gpg-agent[gpg-agent:4691] uid/euid:1000/1000 gid/egid:1000/1000,
parent /[gpg-agent:4690] uid/euid:1000/1000 gid/egid:1000/1000
03:28:32 g0n kernel: [ 332.891970] grsec: (miro:U:/bin/rm) exec of /bin/rm (rm
.gradm-S ) by /bin/rm[uncenz-1st:4693] uid/euid:1000/1000 gid/egid:1000/1000,
parent /usr/local/bin/uncenz-1st[uncenz-1st:4684] uid/euid:1000/1000
gid/egid:1000/1000
03:28:32 g0n kernel: [ 332.896221] grsec: (miro:U:/usr/bin/sudo) exec of
/usr/bin/sudo (sudo -s gradm -S ) by /usr/bin/sudo[uncenz-1st:4694]
uid/euid:1000/1000 gid/egid:1000/1000, parent
/usr/local/bin/uncenz-1st[uncenz-1st:4684] uid/euid:1000/1000
gid/egid:1000/1000
03:28:39 g0n sudo: miro : TTY=pts/14 ; PWD=/Cmn/mr ; USER=root ;
COMMAND=/bin/bash -c gradm -S
03:28:39 g0n kernel: [ 340.631527] grsec: (root:U:/bin/bash) exec of /bin/bash
(/bin/bash -c gradm -S ) by /bin/bash[sudo:4694] uid/euid:0/0 gid/egid:0/0,
parent /usr/local/bin/uncenz-1st[uncenz-1st:4684] uid/euid:1000/1000
gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.639578] grsec: (root:U:/sbin/gradm) exec of
/sbin/gradm (gradm -S ) by /sbin/gradm[bash:4694] uid/euid:0/0 gid/egid:0/0,
parent /usr/local/bin/uncenz-1st[uncenz-1st:4684] uid/euid:1000/1000
gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.643522] grsec: (miro:U:/bin/cat) exec of /bin/cat
(cat .gradm-S ) by /bin/cat[uncenz-1st:4695] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4684]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.646939] grsec: (miro:U:/bin/hostname) exec of
/bin/hostname (hostname ) by /bin/hostname[uncenz-1st:4697] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4696]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.647599] grsec: (miro:U:/) exec of /bin/sed (sed
s/\(...\).*/\1/ ) by /bin/sed[uncenz-1st:4698] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4696]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.668106] grsec: (miro:U:/) exec of /usr/bin/pidof
(pidof ffmpeg ) by /usr/bin/pidof[uncenz-1st:4699] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4684]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.671060] grsec: (miro:U:/) denied open of
/sys/devices/system/cpu/online for reading by /usr/bin/pidof[pidof:4699]
uid/euid:1000/1000 gid/egid:1000/1000, parent
/usr/local/bin/uncenz-1st[uncenz-1st:4684] uid/euid:1000/1000
gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.682505] grsec: (miro:U:/usr/bin/sudo) exec of
/usr/bin/sudo (sudo -s ps aux ) by /usr/bin/sudo[uncenz-1st:4701]
uid/euid:1000/1000 gid/egid:1000/1000, parent
/usr/local/bin/uncenz-1st[uncenz-1st:4700] uid/euid:1000/1000
gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.682616] grsec: (miro:U:/) exec of /bin/egrep (egrep
ffmpeg ) by /bin/egrep[uncenz-1st:4702] uid/euid:1000/1000 gid/egid:1000/1000,
parent /usr/local/bin/uncenz-1st[uncenz-1st:4700] uid/euid:1000/1000
gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.682916] grsec: (miro:U:/) exec of /bin/grep (grep
x11grab ) by /bin/grep[uncenz-1st:4703] uid/euid:1000/1000 gid/egid:1000/1000,
parent /usr/local/bin/uncenz-1st[uncenz-1st:4700] uid/euid:1000/1000
gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.684312] grsec: (miro:U:/) exec of /usr/bin/gawk
(awk { print $2} ) by /usr/bin/gawk[uncenz-1st:4704] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4700]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.690789] grsec: (miro:U:/) exec of /bin/grep (grep
-E ffmpeg ) by /bin/grep[egrep:4702] uid/euid:1000/1000 gid/egid:1000/1000,
parent /usr/local/bin/uncenz-1st[uncenz-1st:4700] uid/euid:1000/1000
gid/egid:1000/1000
03:28:39 g0n sudo: miro : TTY=pts/14 ; PWD=/Cmn/mr ; USER=root ;
COMMAND=/bin/bash -c ps aux
03:28:39 g0n kernel: [ 340.693741] grsec: (root:U:/bin/bash) exec of /bin/bash
(/bin/bash -c ps aux ) by /bin/bash[sudo:4701] uid/euid:0/0 gid/egid:0/0,
parent /usr/local/bin/uncenz-1st[uncenz-1st:4700] uid/euid:1000/1000
gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.696202] grsec: (root:U:/bin/ps) exec of /bin/ps (ps
aux ) by /bin/ps[bash:4701] uid/euid:0/0 gid/egid:0/0, parent
/usr/local/bin/uncenz-1st[uncenz-1st:4700] uid/euid:1000/1000
gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.716057] grsec: (miro:U:/) exec of /usr/bin/pidof
(pidof dumpcap ) by /usr/bin/pidof[uncenz-1st:4705] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4684]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.717422] grsec: (miro:U:/) denied open of
/sys/devices/system/cpu/online for reading by /usr/bin/pidof[pidof:4705]
uid/euid:1000/1000 gid/egid:1000/1000, parent
/usr/local/bin/uncenz-1st[uncenz-1st:4684] uid/euid:1000/1000
gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.722455] grsec: (miro:U:/bin/ps) exec of /bin/ps (ps
aux ) by /bin/ps[uncenz-1st:4706] uid/euid:1000/1000 gid/egid:1000/1000, parent
/usr/local/bin/uncenz-1st[uncenz-1st:4684] uid/euid:1000/1000
gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.722799] grsec: (miro:U:/) exec of /usr/bin/gawk
(awk { print $2 } ) by /usr/bin/gawk[uncenz-1st:4708] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4684]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.724178] grsec: (miro:U:/) exec of /bin/grep (grep
[u]ncenz-1st ) by /bin/grep[uncenz-1st:4707] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4684]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.738545] grsec: (miro:U:/bin/cat) exec of /bin/cat
(cat .uncenz-1st.pid ) by /bin/cat[uncenz-1st:4709] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4684]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.741078] grsec: (miro:U:/) exec of
/usr/local/bin/uncenz-ts (uncenz-ts ) by
/usr/local/bin/uncenz-ts[uncenz-1st:4710] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4684]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.763534] grsec: (miro:U:/) exec of /bin/date (date
+%y%m%d_%H%M ) by /bin/date[uncenz-ts:4711] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-ts[uncenz-ts:4710]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.771416] grsec: (miro:U:/bin/cat) exec of /bin/cat
(cat .uncenz-ts ) by /bin/cat[uncenz-ts:4712] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-ts[uncenz-ts:4710]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.795544] grsec: (miro:U:/bin/cat) exec of /bin/cat
(cat .uncenz-ts ) by /bin/cat[uncenz-1st:4714] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4713]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:39 g0n kernel: [ 340.797603] grsec: (miro:U:/) exec of /bin/tail (tail
-1 /home/miro/.sslkey.log ) by /bin/tail[uncenz-1st:4713] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4684]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:40 g0n kernel: [ 340.822068] grsec: (miro:U:/bin/cat) exec of /bin/cat
(cat .uncenz-ts ) by /bin/cat[uncenz-1st:4715] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4684]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:40 g0n kernel: [ 340.826945] grsec: (miro:U:/bin/cat) exec of /bin/cat
(cat .uncenz-ts ) by /bin/cat[uncenz-1st:4716] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4684]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:40 g0n kernel: [ 340.829082] grsec: (miro:U:/) exec of /bin/chmod (chmod
600 /home/miro/SSLLAST_170311_0328_g0n.txt ) by /bin/chmod[uncenz-1st:4717]
uid/euid:1000/1000 gid/egid:1000/1000, parent
/usr/local/bin/uncenz-1st[uncenz-1st:4684] uid/euid:1000/1000
gid/egid:1000/1000
03:28:40 g0n kernel: [ 340.832121] grsec: (miro:U:/bin/cat) exec of /bin/cat
(cat .uncenz-ts.old ) by /bin/cat[uncenz-1st:4718] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4684]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:40 g0n kernel: [ 340.833809] grsec: (miro:U:/bin/cat) exec of /bin/cat
(cat .uncenz-ts ) by /bin/cat[uncenz-1st:4719] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4684]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:40 g0n kernel: [ 340.835600] grsec: (miro:U:/bin/ls) exec of /bin/ls (ls
-l /home/miro/SSLLAST_170310_2319_g0n.txt
/home/miro/SSLLAST_170311_0328_g0n.txt ) by /bin/ls[uncenz-1st:4720]
uid/euid:1000/1000 gid/egid:1000/1000, parent
/usr/local/bin/uncenz-1st[uncenz-1st:4684] uid/euid:1000/1000
gid/egid:1000/1000
03:28:40 g0n kernel: [ 340.839520] grsec: (miro:U:/bin/cat) exec of /bin/cat
(cat .uncenz-ts ) by /bin/cat[uncenz-1st:4725] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4724]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:40 g0n kernel: [ 340.853692] grsec: (miro:U:/) exec of /bin/cut (cut -d
-f1 ) by /bin/cut[uncenz-1st:4723] uid/euid:1000/1000 gid/egid:1000/1000,
parent /usr/local/bin/uncenz-1st[uncenz-1st:4721] uid/euid:1000/1000
gid/egid:1000/1000
03:28:40 g0n kernel: [ 340.866280] grsec: (miro:U:/usr/bin/sha256sum) exec of
/usr/bin/sha256sum (sha256sum /home/miro/SSLLAST_170311_0328_g0n.txt ) by
/usr/bin/sha256sum[uncenz-1st:4722] uid/euid:1000/1000 gid/egid:1000/1000,
parent /usr/local/bin/uncenz-1st[uncenz-1st:4721] uid/euid:1000/1000
gid/egid:1000/1000
03:28:40 g0n kernel: [ 340.874465] grsec: (miro:U:/) exec of /bin/cut (cut -d
-f1 ) by /bin/cut[uncenz-1st:4728] uid/euid:1000/1000 gid/egid:1000/1000,
parent /usr/local/bin/uncenz-1st[uncenz-1st:4726] uid/euid:1000/1000
gid/egid:1000/1000
03:28:40 g0n kernel: [ 340.875276] grsec: (miro:U:/bin/cat) exec of /bin/cat
(cat .uncenz-ts.old ) by /bin/cat[uncenz-1st:4730] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4729]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:40 g0n kernel: [ 340.879744] grsec: (miro:U:/usr/bin/sha256sum) exec of
/usr/bin/sha256sum (sha256sum /home/miro/SSLLAST_170310_2319_g0n.txt ) by
/usr/bin/sha256sum[uncenz-1st:4727] uid/euid:1000/1000 gid/egid:1000/1000,
parent /usr/local/bin/uncenz-1st[uncenz-1st:4726] uid/euid:1000/1000
gid/egid:1000/1000
03:28:40 g0n kernel: [ 340.882295] grsec: (miro:U:/bin/cat) exec of /bin/cat
(cat .uncenz-ts ) by /bin/cat[uncenz-1st:4731] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4684]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:40 g0n kernel: [ 340.884185] grsec: (miro:U:/usr/bin/sudo) exec of
/usr/bin/sudo (sudo -s touch dump_170311_0328_g0n.pcap ) by
/usr/bin/sudo[uncenz-1st:4732] uid/euid:1000/1000 gid/egid:1000/1000, parent
/usr/local/bin/uncenz-1st[uncenz-1st:4684] uid/euid:1000/1000
gid/egid:1000/1000
03:28:40 g0n sudo: miro : TTY=pts/14 ; PWD=/Cmn/mr ; USER=root ;
COMMAND=/bin/bash -c touch dump_170311_0328_g0n.pcap
03:28:40 g0n kernel: [ 340.888703] grsec: (root:U:/bin/bash) exec of /bin/bash
(/bin/bash -c touch dump_170311_0328_g0n\.pcap ) by /bin/bash[sudo:4732]
uid/euid:0/0 gid/egid:0/0, parent /usr/local/bin/uncenz-1st[uncenz-1st:4684]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:40 g0n kernel: [ 340.897394] grsec: (root:U:/bin/touch) exec of
/bin/touch (touch dump_170311_0328_g0n.pcap ) by /bin/touch[bash:4732]
uid/euid:0/0 gid/egid:0/0, parent /usr/local/bin/uncenz-1st[uncenz-1st:4684]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:40 g0n kernel: [ 340.902609] grsec: (miro:U:/usr/bin/sudo) exec of
/usr/bin/sudo (sudo -s dumpcap -i any -w dump_170311_0328_g0n.pcap ) by
/usr/bin/sudo[uncenz-1st:4733] uid/euid:1000/1000 gid/egid:1000/1000, parent
/usr/local/bin/uncenz-1st[uncenz-1st:4684] uid/euid:1000/1000
gid/egid:1000/1000
03:28:40 g0n kernel: [ 340.903325] grsec: (miro:U:/) exec of /bin/sleep (sleep
1.5 ) by /bin/sleep[uncenz-1st:4734] uid/euid:1000/1000 gid/egid:1000/1000,
parent /usr/local/bin/uncenz-1st[uncenz-1st:4684] uid/euid:1000/1000
gid/egid:1000/1000
03:28:40 g0n sudo: miro : TTY=pts/14 ; PWD=/Cmn/mr ; USER=root ;
COMMAND=/bin/bash -c dumpcap -i any -w dump_170311_0328_g0n.pcap
03:28:40 g0n kernel: [ 340.907383] grsec: (root:U:/bin/bash) exec of /bin/bash
(/bin/bash -c dumpcap -i any -w dump_170311_0328_g0n\.pcap ) by
/bin/bash[sudo:4733] uid/euid:0/0 gid/egid:0/0, parent
/usr/local/bin/uncenz-1st[uncenz-1st:4684] uid/euid:1000/1000
gid/egid:1000/1000
03:28:40 g0n kernel: [ 340.921231] grsec: (root:U:/usr/bin/dumpcap) exec of
/usr/bin/dumpcap (dumpcap -i any -w dump_170311_0328_g0n.pcap ) by
/usr/bin/dumpcap[bash:4733] uid/euid:0/0 gid/egid:0/0, parent
/usr/local/bin/uncenz-1st[uncenz-1st:4684] uid/euid:1000/1000
gid/egid:1000/1000
03:28:41 g0n kernel: [ 342.407563] grsec: (miro:U:/) exec of /bin/sleep (sleep
1.5 ) by /bin/sleep[uncenz-1st:4736] uid/euid:1000/1000 gid/egid:1000/1000,
parent /usr/local/bin/uncenz-1st[uncenz-1st:4684] uid/euid:1000/1000
gid/egid:1000/1000
03:28:41 g0n kernel: [ 342.408433] grsec: (miro:U:/bin/cat) exec of /bin/cat
(cat .uncenz-ts ) by /bin/cat[uncenz-1st:4737] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4735]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:41 g0n kernel: [ 342.440856] grsec: (miro:U:/) exec of /usr/bin/ffmpeg
(ffmpeg -f x11grab -nostdin -loglevel quiet -s 1024x768 -r 25 -i :1.0 -c:v
libx264 -preset ultrafast -threads 0 Screen_170311_032) by
/usr/bin/ffmpeg[uncenz-1st:4735] uid/euid:1000/1000 gid/egid:1000/1000, parent
/usr/local/bin/uncenz-1st[uncenz-1st:4684] uid/euid:1000/1000
gid/egid:1000/1000
03:28:43 g0n kernel: [ 343.913749] grsec: (miro:U:/usr/bin/sudo) exec of
/usr/bin/sudo (sudo -s ps aux ) by /usr/bin/sudo[uncenz-1st:4739]
uid/euid:1000/1000 gid/egid:1000/1000, parent
/usr/local/bin/uncenz-1st[uncenz-1st:4738] uid/euid:1000/1000
gid/egid:1000/1000
03:28:43 g0n kernel: [ 343.913840] grsec: (miro:U:/) exec of /usr/bin/gawk
(awk { print $2} ) by /usr/bin/gawk[uncenz-1st:4742] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4738]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:43 g0n kernel: [ 343.914022] grsec: (miro:U:/) exec of /bin/egrep (egrep
ffmpeg ) by /bin/egrep[uncenz-1st:4740] uid/euid:1000/1000 gid/egid:1000/1000,
parent /usr/local/bin/uncenz-1st[uncenz-1st:4738] uid/euid:1000/1000
gid/egid:1000/1000
03:28:43 g0n kernel: [ 343.914221] grsec: (miro:U:/) exec of /bin/grep (grep
x11grab ) by /bin/grep[uncenz-1st:4741] uid/euid:1000/1000 gid/egid:1000/1000,
parent /usr/local/bin/uncenz-1st[uncenz-1st:4738] uid/euid:1000/1000
gid/egid:1000/1000
03:28:43 g0n kernel: [ 343.917016] grsec: (miro:U:/) exec of /bin/grep (grep
-E ffmpeg ) by /bin/grep[egrep:4740] uid/euid:1000/1000 gid/egid:1000/1000,
parent /usr/local/bin/uncenz-1st[uncenz-1st:4738] uid/euid:1000/1000
gid/egid:1000/1000
03:28:43 g0n sudo: miro : TTY=pts/14 ; PWD=/Cmn/mr ; USER=root ;
COMMAND=/bin/bash -c ps aux
03:28:43 g0n kernel: [ 343.920225] grsec: (root:U:/bin/bash) exec of /bin/bash
(/bin/bash -c ps aux ) by /bin/bash[sudo:4739] uid/euid:0/0 gid/egid:0/0,
parent /usr/local/bin/uncenz-1st[uncenz-1st:4738] uid/euid:1000/1000
gid/egid:1000/1000
03:28:43 g0n kernel: [ 343.922606] grsec: (root:U:/bin/ps) exec of /bin/ps (ps
aux ) by /bin/ps[bash:4739] uid/euid:0/0 gid/egid:0/0, parent
/usr/local/bin/uncenz-1st[uncenz-1st:4738] uid/euid:1000/1000
gid/egid:1000/1000
03:28:43 g0n kernel: [ 343.928929] grsec: (miro:U:/) denied open of
/sys/devices/system/cpu/online for reading by /usr/bin/ffmpeg[ffmpeg:4735]
uid/euid:1000/1000 gid/egid:1000/1000, parent
/usr/local/bin/uncenz-1st[uncenz-1st:4684] uid/euid:1000/1000
gid/egid:1000/1000
03:28:43 g0n kernel: [ 343.942846] grsec: (miro:U:/usr/bin/sudo) exec of
/usr/bin/sudo (sudo -s ps aux ) by /usr/bin/sudo[uncenz-1st:4749]
uid/euid:1000/1000 gid/egid:1000/1000, parent
/usr/local/bin/uncenz-1st[uncenz-1st:4748] uid/euid:1000/1000
gid/egid:1000/1000
03:28:43 g0n kernel: [ 343.943230] grsec: (miro:U:/) exec of /usr/bin/gawk
(awk { print $2} ) by /usr/bin/gawk[uncenz-1st:4751] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4748]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:43 g0n kernel: [ 343.943720] grsec: (miro:U:/) exec of /bin/egrep (egrep
[d]umpcap ) by /bin/egrep[uncenz-1st:4750] uid/euid:1000/1000
gid/egid:1000/1000, parent /usr/local/bin/uncenz-1st[uncenz-1st:4748]
uid/euid:1000/1000 gid/egid:1000/1000
03:28:43 g0n kernel: [ 343.945896] grsec: (miro:U:/) exec of /bin/grep (grep
-E [d]umpcap ) by /bin/grep[egrep:4750] uid/euid:1000/1000 gid/egid:1000/1000,
parent /usr/local/bin/uncenz-1st[uncenz-1st:4748] uid/euid:1000/1000
gid/egid:1000/1000
03:28:43 g0n sudo: miro : TTY=pts/14 ; PWD=/Cmn/mr ; USER=root ;
COMMAND=/bin/bash -c ps aux
03:28:43 g0n kernel: [ 343.947795] grsec: (root:U:/bin/bash) exec of /bin/bash
(/bin/bash -c ps aux ) by /bin/bash[sudo:4749] uid/euid:0/0 gid/egid:0/0,
parent /usr/local/bin/uncenz-1st[uncenz-1st:4748] uid/euid:1000/1000
gid/egid:1000/1000
03:28:43 g0n kernel: [ 343.950211] grsec: (root:U:/bin/ps) exec of /bin/ps (ps
aux ) by /bin/ps[bash:4749] uid/euid:0/0 gid/egid:0/0, parent
/usr/local/bin/uncenz-1st[uncenz-1st:4748] uid/euid:1000/1000
gid/egid:1000/1000
1 0.000000000 192.168.1.4 → 255.255.255.255 DHCP 408 DHCP Request - Transaction ID 0xc3a07981
03:28:44 g0n dhcpcd[2923]: eth1: carrier acquired 03:28:44 g0n kernel: [ 345.261808] sky2 0000:06:00.0 eth1: Link is up at 100 Mbps, full duplex, flow control both 03:28:44 g0n kernel: [ 345.261871] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready 03:28:44 g0n kernel: [ 345.263303] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:4759] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:28:44 g0n dhcpcd[2923]: eth1: IAID 2e:ab:28:71 03:28:44 g0n dhcpcd[2923]: eth1: adding address fe80::30b7:84a9:5f50:6486 03:28:44 g0n dhcpcd[2923]: eth1: soliciting an IPv6 router 03:28:44 g0n dhcpcd[2923]: eth1: rebinding lease of 192.168.1.4 03:28:44 g0n kernel: [ 345.570183] mrfw_dropIN=eth1 OUT= MAC=00:0e:2e:ab:28:71:2c:95:7f:8b:44:87:08:00 SRC=192.168.1.1 DST=192.168.1.4 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=67 DPT=68 LEN=556 03:28:44 g0n dhcpcd[2923]: eth1: leased 192.168.1.4 for infinity 03:28:44 g0n dhcpcd[2923]: eth1: adding route to 192.168.1.0/24 03:28:44 g0n dhcpcd[2923]: eth1: adding default route via 192.168.1.1 03:28:44 g0n kernel: [ 345.577919] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:4760] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:28:44 g0n kernel: [ 345.595069] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4762] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4760] uid/euid:0/0 gid/egid:0/0 03:28:44 g0n kernel: [ 345.595760] grsec: (root:U:/) exec of /bin/sed (sed -n s/^domain //p eth1.dhcp ) by /bin/sed[dhcpcd-run-hook:4763] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4762] uid/euid:0/0 gid/egid:0/0 03:28:44 g0n kernel: [ 345.598900] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4764] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4760] uid/euid:0/0 gid/egid:0/0 03:28:44 g0n kernel: [ 345.599961] grsec: (root:U:/) exec of /bin/sed (sed -n s/^search //p eth1.dhcp ) by /bin/sed[dhcpcd-run-hook:4765] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4764] uid/euid:0/0 gid/egid:0/0 03:28:44 g0n kernel: [ 345.602517] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4766] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4760] uid/euid:0/0 gid/egid:0/0 03:28:44 g0n kernel: [ 345.603136] grsec: (root:U:/) exec of /bin/sed (sed -n s/^nameserver //p eth1.dhcp ) by /bin/sed[dhcpcd-run-hook:4767] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4766] uid/euid:0/0 gid/egid:0/0 03:28:44 g0n kernel: [ 345.607127] grsec: (root:U:/) exec of /usr/bin/cmp (cmp -s /etc/resolv.conf /run/dhcpcd/resolv.conf.eth1.dhcp ) by /usr/bin/cmp[dhcpcd-run-hook:4769] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4760] uid/euid:0/0 gid/egid:0/0 03:28:44 g0n kernel: [ 345.608865] grsec: (root:U:/) exec of /bin/cat (cat /run/dhcpcd/resolv.conf.eth1.dhcp ) by /bin/cat[dhcpcd-run-hook:4770] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4760] uid/euid:0/0 gid/egid:0/0 03:28:44 g0n dnsmasq[4003]: reading /etc/resolv.conf 03:28:44 g0n dnsmasq[4003]: using nameserver 81.2.237.32#53 03:28:44 g0n dnsmasq[4003]: using nameserver 31.14.133.188#53 03:28:44 g0n dnsmasq[4003]: using nameserver 5.9.49.12#53 03:28:44 g0n kernel: [ 345.610713] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.eth1.dhcp ) by /bin/rm[dhcpcd-run-hook:4771] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4760] uid/euid:0/0 gid/egid:0/0 03:28:44 g0n kernel: [ 345.612373] grsec: (root:U:/bin/chmod) exec of /bin/chmod (chmod 644 /etc/resolv.conf ) by /bin/chmod[dhcpcd-run-hook:4772] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4760] uid/euid:0/0 gid/egid:0/0 03:28:44 g0n kernel: [ 345.613989] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.eth1.dhcp ) by /bin/rm[dhcpcd-run-hook:4773] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4760] uid/euid:0/0 gid/egid:0/0 03:28:44 g0n kernel: [ 345.617475] grsec: (root:U:/bin/hostname) exec of /bin/hostname (hostname ) by /bin/hostname[dhcpcd-run-hook:4775] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4774] uid/euid:0/0 gid/egid:0/0
Frame 1: 408 bytes on wire (3264 bits), 408 bytes captured (3264 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:28:44.732344381 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199324.732344381 seconds
[Time delta from previous captured frame: 0.000000000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 0.000000000 seconds]
Frame Number: 1
Frame Length: 408 bytes (3264 bits)
Capture Length: 408 bytes (3264 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: EdimaxTe_ab:28:71 (00:0e:2e:ab:28:71)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.1.4, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 392
Identification: 0x4f2d (20269)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x688c [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.1.4
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 372
Checksum: 0x8005 [unverified]
[Checksum Status: Unverified]
[Stream index: 0]
Bootstrap Protocol (Request)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0xc3a07981
Seconds elapsed: 0
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 192.168.1.4
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: EdimaxTe_ab:28:71 (00:0e:2e:ab:28:71)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Request)
Length: 1
DHCP: Request (3)
Option: (61) Client identifier
Length: 19
IAID: 2efd249c
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
2 0.017181879 192.168.1.1 → 192.168.1.4 DHCP 592 DHCP ACK - Transaction ID 0xc3a07981
Frame 2: 592 bytes on wire (4736 bits), 592 bytes captured (4736 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:28:44.749526260 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199324.749526260 seconds
[Time delta from previous captured frame: 0.017181879 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 0.017181879 seconds]
Frame Number: 2
Frame Length: 592 bytes (4736 bits)
Capture Length: 592 bytes (4736 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Unicast to us (0)
Link-layer address type: 1
Link-layer address length: 6
Source: Zte_8b:44:87 (2c:95:7f:8b:44:87)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.1.1, Dst: 192.168.1.4
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 576
Identification: 0x0000 (0)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0xf557 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.1.1
Destination: 192.168.1.4
User Datagram Protocol, Src Port: bootps (67), Dst Port: bootpc (68)
Source Port: bootps (67)
Destination Port: bootpc (68)
Length: 556
Checksum: 0x52ce [unverified]
[Checksum Status: Unverified]
[Stream index: 1]
Bootstrap Protocol (ACK)
Message type: Boot Reply (2)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0xc3a07981
Seconds elapsed: 0
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 192.168.1.4
Your (client) IP address: 192.168.1.4
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: EdimaxTe_ab:28:71 (00:0e:2e:ab:28:71)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (ACK)
Length: 1
DHCP: ACK (5)
Option: (1) Subnet Mask
Length: 4
Subnet Mask: 255.255.255.0
Option: (3) Router
Length: 4
Router: 192.168.1.1
Option: (6) Domain Name Server
Length: 12
Domain Name Server: 81.2.237.32
Domain Name Server: 31.14.133.188
Domain Name Server: 5.9.49.12
Option: (54) DHCP Server Identifier
Length: 4
DHCP Server Identifier: 192.168.1.1
Option: (51) IP Address Lease Time
Length: 4
IP Address Lease Time: (4294967295s) infinity
Option: (125) V-I Vendor-specific Information
Length: 40
Enterprise: Canstar (17)
Length: 35
Option 125 Suboption: 50
Length: 67
[Expert Info (Error/Protocol): Suboption 50: no room left in option for suboption value]
[Suboption 50: no room left in option for suboption value]
[Severity level: Error]
[Group: Protocol]
Option: (255) End
Option End: 255
Padding: 000000000000000000000000000000000000000000000000...
3 12.055496799 0.0.0.0 → 255.255.255.255 DHCP 410 DHCP Discover - Transaction ID 0xb6130e6e
Frame 3: 410 bytes on wire (3280 bits), 410 bytes captured (3280 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:28:56.787841180 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199336.787841180 seconds
[Time delta from previous captured frame: 12.038314920 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 12.055496799 seconds]
Frame Number: 3
Frame Length: 410 bytes (3280 bits)
Capture Length: 410 bytes (3280 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: 46:62:59:56:fe:4d (46:62:59:56:fe:4d)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 394
Identification: 0x5e9f (24223)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x1ac5 [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 374
Checksum: 0xde57 [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0xb6130e6e
Seconds elapsed: 313
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: 46:62:59:56:fe:4d (46:62:59:56:fe:4d)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 5956fe4d
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
03:28:45 g0n dhcpcd[2923]: eth1: Router Advertisement from fe80::1 03:28:45 g0n dhcpcd[2923]: eth1: adding default route via fe80::1 03:28:45 g0n kernel: [ 346.538964] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:4777] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:28:45 g0n kernel: [ 346.554561] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4779] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4777] uid/euid:0/0 gid/egid:0/0 03:28:45 g0n kernel: [ 346.555275] grsec: (root:U:/) exec of /bin/sed (sed -n s/^domain //p eth1.dhcp eth1.ra ) by /bin/sed[dhcpcd-run-hook:4780] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4779] uid/euid:0/0 gid/egid:0/0 03:28:45 g0n kernel: [ 346.558080] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4781] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4777] uid/euid:0/0 gid/egid:0/0 03:28:45 g0n kernel: [ 346.558877] grsec: (root:U:/) exec of /bin/sed (sed -n s/^search //p eth1.dhcp eth1.ra ) by /bin/sed[dhcpcd-run-hook:4782] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4781] uid/euid:0/0 gid/egid:0/0 03:28:45 g0n kernel: [ 346.561632] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4783] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4777] uid/euid:0/0 gid/egid:0/0 03:28:45 g0n kernel: [ 346.562317] grsec: (root:U:/) exec of /bin/sed (sed -n s/^nameserver //p eth1.dhcp eth1.ra ) by /bin/sed[dhcpcd-run-hook:4784] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4783] uid/euid:0/0 gid/egid:0/0 03:28:45 g0n kernel: [ 346.566622] grsec: (root:U:/) exec of /usr/bin/cmp (cmp -s /etc/resolv.conf /run/dhcpcd/resolv.conf.eth1.ra ) by /usr/bin/cmp[dhcpcd-run-hook:4786] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4777] uid/euid:0/0 gid/egid:0/0 03:28:45 g0n kernel: [ 346.568318] grsec: (root:U:/) exec of /bin/cat (cat /run/dhcpcd/resolv.conf.eth1.ra ) by /bin/cat[dhcpcd-run-hook:4787] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4777] uid/euid:0/0 gid/egid:0/0 03:28:45 g0n dnsmasq[4003]: reading /etc/resolv.conf 03:28:45 g0n dnsmasq[4003]: using nameserver 81.2.237.32#53 03:28:45 g0n dnsmasq[4003]: using nameserver 31.14.133.188#53 03:28:45 g0n dnsmasq[4003]: using nameserver 5.9.49.12#53 03:28:45 g0n dnsmasq[4003]: using nameserver fe80::1%eth1#53 03:28:45 g0n kernel: [ 346.570080] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.eth1.ra ) by /bin/rm[dhcpcd-run-hook:4788] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4777] uid/euid:0/0 gid/egid:0/0 03:28:45 g0n kernel: [ 346.571821] grsec: (root:U:/bin/chmod) exec of /bin/chmod (chmod 644 /etc/resolv.conf ) by /bin/chmod[dhcpcd-run-hook:4789] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4777] uid/euid:0/0 gid/egid:0/0 03:28:45 g0n kernel: [ 346.576691] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.eth1.ra ) by /bin/rm[dhcpcd-run-hook:4790] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4777] uid/euid:0/0 gid/egid:0/0 03:28:45 g0n kernel: [ 346.585260] grsec: (root:U:/bin/hostname) exec of /bin/hostname (hostname ) by /bin/hostname[dhcpcd-run-hook:4792] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4791] uid/euid:0/0 gid/egid:0/0 03:28:45 g0n dhcpcd[2923]: eth1: requesting DHCPv6 information 03:28:46 g0n kernel: [ 347.041222] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:4794] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:28:46 g0n kernel: [ 347.050403] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4796] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4794] uid/euid:0/0 gid/egid:0/0 03:28:46 g0n kernel: [ 347.051464] grsec: (root:U:/) exec of /bin/sed (sed -n s/^domain //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:4797] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4796] uid/euid:0/0 gid/egid:0/0 03:28:46 g0n kernel: [ 347.058350] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4798] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4794] uid/euid:0/0 gid/egid:0/0 03:28:46 g0n kernel: [ 347.059486] grsec: (root:U:/) exec of /bin/sed (sed -n s/^search //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:4799] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4798] uid/euid:0/0 gid/egid:0/0 03:28:46 g0n kernel: [ 347.064912] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4800] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4794] uid/euid:0/0 gid/egid:0/0 03:28:46 g0n kernel: [ 347.066460] grsec: (root:U:/) exec of /bin/sed (sed -n s/^nameserver //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:4801] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4800] uid/euid:0/0 gid/egid:0/0 03:28:46 g0n kernel: [ 347.070806] grsec: (root:U:/) exec of /usr/bin/cmp (cmp -s /etc/resolv.conf /run/dhcpcd/resolv.conf.eth1.dhcp6 ) by /usr/bin/cmp[dhcpcd-run-hook:4803] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4794] uid/euid:0/0 gid/egid:0/0 03:28:46 g0n kernel: [ 347.072659] grsec: (root:U:/) exec of /bin/cat (cat /run/dhcpcd/resolv.conf.eth1.dhcp6 ) by /bin/cat[dhcpcd-run-hook:4804] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4794] uid/euid:0/0 gid/egid:0/0 03:28:46 g0n dnsmasq[4003]: reading /etc/resolv.conf 03:28:46 g0n dnsmasq[4003]: using nameserver 81.2.237.32#53 03:28:46 g0n dnsmasq[4003]: using nameserver 31.14.133.188#53 03:28:46 g0n dnsmasq[4003]: using nameserver 5.9.49.12#53 03:28:46 g0n dnsmasq[4003]: using nameserver fe80::1%eth1#53 03:28:46 g0n kernel: [ 347.074546] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.eth1.dhcp6 ) by /bin/rm[dhcpcd-run-hook:4805] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4794] uid/euid:0/0 gid/egid:0/0 03:28:46 g0n kernel: [ 347.076062] grsec: (root:U:/bin/chmod) exec of /bin/chmod (chmod 644 /etc/resolv.conf ) by /bin/chmod[dhcpcd-run-hook:4806] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4794] uid/euid:0/0 gid/egid:0/0 03:28:46 g0n kernel: [ 347.077546] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.eth1.dhcp6 ) by /bin/rm[dhcpcd-run-hook:4807] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4794] uid/euid:0/0 gid/egid:0/0 03:28:46 g0n kernel: [ 347.080844] grsec: (root:U:/bin/hostname) exec of /bin/hostname (hostname ) by /bin/hostname[dhcpcd-run-hook:4809] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4808] uid/euid:0/0 gid/egid:0/0 03:28:57 g0n kernel: [ 358.150943] grsec: (miro:U:/) exec of /usr/local/bin/GentooVM22.sh (GentooVM22.sh ) by /usr/local/bin/GentooVM22.sh[bash:4811] uid/euid:1000/1000 gid/egid:1000/1000, parent /bin/bash[bash:4494] uid/euid:1000/1000 gid/egid:1000/1000 03:28:58 g0n kernel: [ 359.057576] grsec: (miro:U:/) exec of /usr/bin/qemu-img (qemu-img create -f qcow2 gentoo22.img 10G ) by /usr/bin/qemu-img[GentooVM22.sh:4814] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/local/bin/GentooVM22.sh[GentooVM22.sh:4811] uid/euid:1000/1000 gid/egid:1000/1000 03:28:58 g0n kernel: [ 359.113696] grsec: (miro:U:/usr/bin/virt-install) exec of /usr/bin/virt-install (virt-install --connect qemu:///system --machine q35 --virt-type kvm --name gentoo22 --disk gentoo22.img --memory 512 --network n) by /usr/bin/virt-install[GentooVM22.sh:4811] uid/euid:1000/1000 gid/egid:1000/1000, parent /bin/bash[bash:4494] uid/euid:1000/1000 gid/egid:1000/1000 03:28:58 g0n kernel: [ 359.142569] grsec: (miro:U:/) exec of /usr/share/virt-manager/virt-install (/usr/share/virt-manager/virt-install --connect qemu:///system --machine q35 --virt-type kvm --name gentoo22 --disk gentoo22.img ) by /usr/share/virt-manager/virt-install[virt-install:4811] uid/euid:1000/1000 gid/egid:1000/1000, parent /bin/bash[bash:4494] uid/euid:1000/1000 gid/egid:1000/1000 03:28:58 g0n kernel: [ 359.144195] grsec: (miro:U:/usr/bin/python2.7) exec of /usr/bin/python2.7 (python2.7 /usr/share/virt-manager/virt-install --connect qemu:///system --machine q35 --virt-type kvm --name gentoo22 --disk gen) by /usr/bin/python2.7[virt-install:4811] uid/euid:1000/1000 gid/egid:1000/1000, parent /bin/bash[bash:4494] uid/euid:1000/1000 gid/egid:1000/1000 03:29:00 g0n kernel: [ 360.834453] grsec: (miro:U:/sbin/ldconfig) exec of /sbin/ldconfig (/sbin/ldconfig -p ) by /sbin/ldconfig[python2.7:4815] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/python2.7[python2.7:4811] uid/euid:1000/1000 gid/egid:1000/1000 03:29:03 g0n kernel: [ 364.773958] grsec: (miro:U:/usr/bin/virt-viewer) exec of /usr/bin/virt-viewer (virt-viewer --version ) by /usr/bin/virt-viewer[python2.7:4823] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/python2.7[python2.7:4811] uid/euid:1000/1000 gid/egid:1000/1000
4 20.943716743 0.0.0.0 → 255.255.255.255 DHCP 413 DHCP Discover - Transaction ID 0x888639e4
03:29:05 g0n kernel: [ 365.823413] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:4845] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:29:05 g0n kernel: [ 365.824353] grsec: (root:U:/) exec of /lib64/udev/net.sh (/lib/udev/net.sh vnet0 start ) by /lib64/udev/net.sh[udevd:4846] uid/euid:0/0 gid/egid:0/0, parent /sbin/udevd[udevd:4844] uid/euid:0/0 gid/egid:0/0 03:29:05 g0n kernel: [ 365.834110] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:4847] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:29:05 g0n kernel: [ 365.840741] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4850] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4847] uid/euid:0/0 gid/egid:0/0 03:29:05 g0n kernel: [ 365.841536] grsec: (root:U:/) exec of /bin/sed (sed -n s/^domain //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:4851] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4850] uid/euid:0/0 gid/egid:0/0 03:29:05 g0n kernel: [ 365.844768] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4852] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4847] uid/euid:0/0 gid/egid:0/0 03:29:05 g0n kernel: [ 365.845688] grsec: (root:U:/) exec of /bin/sed (sed -n s/^search //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:4853] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4852] uid/euid:0/0 gid/egid:0/0 03:29:05 g0n kernel: [ 365.847681] virbr0: port 2(vnet0) entered blocking state 03:29:05 g0n kernel: [ 365.847684] virbr0: port 2(vnet0) entered disabled state 03:29:05 g0n kernel: [ 365.847806] device vnet0 entered promiscuous mode 03:29:05 g0n kernel: [ 365.848744] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4854] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4847] uid/euid:0/0 gid/egid:0/0 03:29:05 g0n kernel: [ 365.849607] grsec: (root:U:/) exec of /bin/sed (sed -n s/^nameserver //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:4855] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4854] uid/euid:0/0 gid/egid:0/0 03:29:05 g0n kernel: [ 365.853140] virbr0: port 2(vnet0) entered blocking state 03:29:05 g0n kernel: [ 365.853144] virbr0: port 2(vnet0) entered listening state 03:29:05 g0n kernel: [ 365.855553] grsec: (root:U:/) exec of /usr/bin/cmp (cmp -s /etc/resolv.conf /run/dhcpcd/resolv.conf.vnet0.dhcp ) by /usr/bin/cmp[dhcpcd-run-hook:4857] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4847] uid/euid:0/0 gid/egid:0/0 03:29:05 g0n kernel: [ 365.859288] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.vnet0.dhcp ) by /bin/rm[dhcpcd-run-hook:4858] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4847] uid/euid:0/0 gid/egid:0/0 03:29:05 g0n kernel: [ 365.860902] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.vnet0.dhcp ) by /bin/rm[dhcpcd-run-hook:4859] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4847] uid/euid:0/0 gid/egid:0/0 03:29:05 g0n dhcpcd[2923]: vnet0: waiting for carrier 03:29:05 g0n dhcpcd[2923]: vnet0: new hardware address: fe:54:00:98:2f:06 03:29:05 g0n dhcpcd[2923]: vnet0: carrier acquired 03:29:05 g0n kernel: [ 365.867042] grsec: (root:U:/usr/sbin/libvirtd) chdir to / by /usr/sbin/libvirtd[libvirtd:4861] uid/euid:0/0 gid/egid:0/0, parent /usr/sbin/libvirtd[libvirtd:3908] uid/euid:0/0 gid/egid:0/0 03:29:05 g0n kernel: [ 365.868042] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:4862] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:29:05 g0n kernel: [ 365.871017] cgroup: libvirtd (3908) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. 03:29:05 g0n kernel: [ 365.871021] cgroup: "memory" requires setting use_hierarchy to 1 on the root 03:29:05 g0n dhcpcd[2923]: vnet0: IAID 00:98:2f:06 03:29:05 g0n dhcpcd[2923]: vnet0: adding address fe80::9326:ba01:4521:ee7f 03:29:05 g0n dhcpcd[2923]: vnet0: soliciting an IPv6 router 03:29:05 g0n kernel: [ 365.894433] grsec: (qemu:U:/) exec of /usr/bin/qemu-system-x86_64 (/usr/bin/qemu-system-x86_64 -name guest=gentoo22,debug-threads=on -S -object secret,id=masterKey0,format=raw,file=/var/lib/libvi) by /usr/bin/qemu-system-x86_64[libvirtd:4863] uid/euid:77/77 gid/egid:77/77, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0 03:29:05 g0n dhcpcd[2923]: vnet0: soliciting a DHCP lease 03:29:05 g0n qemu-system-x86_64: SQL engine 'mysql' not supported 03:29:05 g0n qemu-system-x86_64: auxpropfunc error no mechanism available 03:29:05 g0n qemu-system-x86_64: _sasl_plugin_load failed on sasl_auxprop_plug_init for plugin: sql 03:29:05 g0n kernel: [ 366.680929] grsec: (miro:U:/usr/bin/virt-viewer) exec of /usr/bin/virt-viewer (virt-viewer --connect qemu:///system --wait gentoo22 ) by /usr/bin/virt-viewer[python2.7:4886] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/python2.7[python2.7:4811] uid/euid:1000/1000 gid/egid:1000/1000
Frame 4: 413 bytes on wire (3304 bits), 413 bytes captured (3304 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:29:05.676061124 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199345.676061124 seconds
[Time delta from previous captured frame: 8.888219944 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 20.943716743 seconds]
Frame Number: 4
Frame Length: 413 bytes (3304 bits)
Capture Length: 413 bytes (3304 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: fe:54:00:98:2f:06 (fe:54:00:98:2f:06)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 397
Identification: 0x79ba (31162)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0xffa6 [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 377
Checksum: 0xc4f9 [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x888639e4
Seconds elapsed: 0
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: fe:54:00:98:2f:06 (fe:54:00:98:2f:06)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00982f06
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
03:29:06 g0n kernel: [ 367.166459] grsec: (miro:U:/bin/bash) exec of /bin/bash (sh -c "/usr/bin/xkbcomp" -w 1 "-R/usr/share/X11/xkb" -xkm "-" -em1 "The XKEYBOARD keymap compiler (xkbcomp) reports:" -emp "> " ) by /bin/bash[X:4887] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/Xorg[X:4418] uid/euid:1000/0 gid/egid:1000/1000 03:29:06 g0n kernel: [ 367.176344] grsec: (miro:U:/) exec of /usr/bin/xkbcomp (/usr/bin/xkbcomp -w 1 -R/usr/share/X11/xkb -xkm - -em1 The XKEYBOARD keymap compiler (xkbcomp) reports: -emp > -eml Errors from) by /usr/bin/xkbcomp[sh:4887] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/Xorg[X:4418] uid/euid:1000/0 gid/egid:1000/1000 03:29:06 g0n kernel: [ 367.182513] grsec: (miro:U:/) chdir to /usr/share/X11/xkb by /usr/bin/xkbcomp[xkbcomp:4887] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/Xorg[X:4418] uid/euid:1000/0 gid/egid:1000/1000 03:29:07 g0n kernel: [ 367.913615] virbr0: port 2(vnet0) entered learning state 03:29:08 g0n kernel: [ 369.100959] kvm: zapping shadow pages for mmio generation wraparound 03:29:09 g0n dhcpcd[2923]: virbr0: carrier acquired 03:29:09 g0n kernel: [ 369.960661] virbr0: port 2(vnet0) entered forwarding state 03:29:09 g0n kernel: [ 369.960666] virbr0: topology change detected, propagating 03:29:09 g0n kernel: [ 369.962021] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:4889] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:29:09 g0n dhcpcd[2923]: virbr0: IAID 00:ea:ee:e9 03:29:09 g0n dhcpcd[2923]: virbr0: IAID conflicts with one assigned to virbr0-nic 03:29:09 g0n dhcpcd[2923]: virbr0: adding address fe80::7e36:b0a1:9718:3d3a 03:29:09 g0n dhcpcd[2923]: if_addaddress6: Permission denied 03:29:09 g0n kernel: [ 370.011930] kvm [4863]: vcpu0, guest rIP: 0xffffffff8103a831 unhandled rdmsr: 0xc0010048 03:29:09 g0n kernel: [ 370.194165] kvm: zapping shadow pages for mmio generation wraparound
5 25.355719253 0.0.0.0 → 255.255.255.255 DHCP 413 DHCP Discover - Transaction ID 0xf8de1305
03:29:10 g0n dhcpcd[2923]: virbr0: soliciting a DHCP lease 03:29:10 g0n dhcpcd[2923]: virbr0: soliciting an IPv6 router 03:29:10 g0n dhcpcd[2923]: vnet0: probing for an IPv4LL address
Frame 5: 413 bytes on wire (3304 bits), 413 bytes captured (3304 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:29:10.088063634 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199350.088063634 seconds
[Time delta from previous captured frame: 4.412002510 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 25.355719253 seconds]
Frame Number: 5
Frame Length: 413 bytes (3304 bits)
Capture Length: 413 bytes (3304 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 397
Identification: 0xad51 (44369)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0xcc0f [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 377
Checksum: 0xa715 [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0xf8de1305
Seconds elapsed: 0
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00eaeee9
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
6 25.355749574 0.0.0.0 → 255.255.255.255 DHCP 413 DHCP Discover - Transaction ID 0xf8de1305
Frame 6: 413 bytes on wire (3304 bits), 413 bytes captured (3304 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:29:10.088093955 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199350.088093955 seconds
[Time delta from previous captured frame: 0.000030321 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 25.355749574 seconds]
Frame Number: 6
Frame Length: 413 bytes (3304 bits)
Capture Length: 413 bytes (3304 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 397
Identification: 0xad51 (44369)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0xcc0f [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 377
Checksum: 0xa715 [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0xf8de1305
Seconds elapsed: 0
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00eaeee9
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
7 25.432225743 0.0.0.0 → 255.255.255.255 DHCP 413 DHCP Discover - Transaction ID 0x888639e4
Frame 7: 413 bytes on wire (3304 bits), 413 bytes captured (3304 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:29:10.164570124 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199350.164570124 seconds
[Time delta from previous captured frame: 0.076476169 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 25.432225743 seconds]
Frame Number: 7
Frame Length: 413 bytes (3304 bits)
Capture Length: 413 bytes (3304 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: fe:54:00:98:2f:06 (fe:54:00:98:2f:06)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 397
Identification: 0xe38d (58253)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x95d3 [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 377
Checksum: 0xc4f5 [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x888639e4
Seconds elapsed: 4
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: fe:54:00:98:2f:06 (fe:54:00:98:2f:06)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00982f06
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
8 29.064987915 0.0.0.0 → 255.255.255.255 DHCP 413 DHCP Discover - Transaction ID 0xf8de1305
Frame 8: 413 bytes on wire (3304 bits), 413 bytes captured (3304 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:29:13.797332296 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199353.797332296 seconds
[Time delta from previous captured frame: 3.632762172 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 29.064987915 seconds]
Frame Number: 8
Frame Length: 413 bytes (3304 bits)
Capture Length: 413 bytes (3304 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 397
Identification: 0x1c27 (7207)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x5d3a [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 377
Checksum: 0xa712 [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0xf8de1305
Seconds elapsed: 3
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00eaeee9
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
9 29.065008470 0.0.0.0 → 255.255.255.255 DHCP 413 DHCP Discover - Transaction ID 0xf8de1305
Frame 9: 413 bytes on wire (3304 bits), 413 bytes captured (3304 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:29:13.797352851 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199353.797352851 seconds
[Time delta from previous captured frame: 0.000020555 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 29.065008470 seconds]
Frame Number: 9
Frame Length: 413 bytes (3304 bits)
Capture Length: 413 bytes (3304 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 397
Identification: 0x1c27 (7207)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x5d3a [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 377
Checksum: 0xa712 [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0xf8de1305
Seconds elapsed: 3
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00eaeee9
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
03:29:15 g0n dhcpcd[2923]: virbr0: probing for an IPv4LL address 03:29:15 g0n dhcpcd[2923]: vnet0: using IPv4LL address 169.254.227.232 03:29:15 g0n dhcpcd[2923]: vnet0: adding route to 169.254.0.0/16 03:29:15 g0n kernel: [ 376.291255] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:4890] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:29:15 g0n kernel: [ 376.303635] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4892] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4890] uid/euid:0/0 gid/egid:0/0 03:29:15 g0n kernel: [ 376.304413] grsec: (root:U:/) exec of /bin/sed (sed -n s/^domain //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:4893] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4892] uid/euid:0/0 gid/egid:0/0 03:29:15 g0n kernel: [ 376.307130] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4894] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4890] uid/euid:0/0 gid/egid:0/0 03:29:15 g0n kernel: [ 376.307829] grsec: (root:U:/) exec of /bin/sed (sed -n s/^search //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:4895] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4894] uid/euid:0/0 gid/egid:0/0 03:29:15 g0n kernel: [ 376.310106] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4896] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4890] uid/euid:0/0 gid/egid:0/0 03:29:15 g0n kernel: [ 376.310793] grsec: (root:U:/) exec of /bin/sed (sed -n s/^nameserver //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:4897] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4896] uid/euid:0/0 gid/egid:0/0 03:29:15 g0n kernel: [ 376.314567] grsec: (root:U:/) exec of /usr/bin/cmp (cmp -s /etc/resolv.conf /run/dhcpcd/resolv.conf.vnet0.ipv4ll ) by /usr/bin/cmp[dhcpcd-run-hook:4899] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4890] uid/euid:0/0 gid/egid:0/0 03:29:15 g0n kernel: [ 376.315973] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.vnet0.ipv4ll ) by /bin/rm[dhcpcd-run-hook:4900] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4890] uid/euid:0/0 gid/egid:0/0 03:29:15 g0n kernel: [ 376.317280] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.vnet0.ipv4ll ) by /bin/rm[dhcpcd-run-hook:4901] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4890] uid/euid:0/0 gid/egid:0/0 03:29:15 g0n kernel: [ 376.320479] grsec: (root:U:/bin/hostname) exec of /bin/hostname (hostname ) by /bin/hostname[dhcpcd-run-hook:4903] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4902] uid/euid:0/0 gid/egid:0/0
10 33.433120996 0.0.0.0 → 255.255.255.255 DHCP 413 DHCP Discover - Transaction ID 0x888639e4
03:29:18 g0n dhcpcd[2923]: vnet0: no IPv6 Routers available
Frame 10: 413 bytes on wire (3304 bits), 413 bytes captured (3304 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:29:18.165465377 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199358.165465377 seconds
[Time delta from previous captured frame: 4.368112526 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 33.433120996 seconds]
Frame Number: 10
Frame Length: 413 bytes (3304 bits)
Capture Length: 413 bytes (3304 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: fe:54:00:98:2f:06 (fe:54:00:98:2f:06)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 397
Identification: 0x69db (27099)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x0f86 [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 377
Checksum: 0xc4ed [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x888639e4
Seconds elapsed: 12
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: fe:54:00:98:2f:06 (fe:54:00:98:2f:06)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00982f06
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
11 36.780444651 0.0.0.0 → 255.255.255.255 DHCP 413 DHCP Discover - Transaction ID 0xf8de1305
Frame 11: 413 bytes on wire (3304 bits), 413 bytes captured (3304 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:29:21.512789032 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199361.512789032 seconds
[Time delta from previous captured frame: 3.347323655 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 36.780444651 seconds]
Frame Number: 11
Frame Length: 413 bytes (3304 bits)
Capture Length: 413 bytes (3304 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 397
Identification: 0x0b49 (2889)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x6e18 [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 377
Checksum: 0xa70a [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0xf8de1305
Seconds elapsed: 11
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00eaeee9
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
12 36.780462804 0.0.0.0 → 255.255.255.255 DHCP 413 DHCP Discover - Transaction ID 0xf8de1305
Frame 12: 413 bytes on wire (3304 bits), 413 bytes captured (3304 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:29:21.512807185 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199361.512807185 seconds
[Time delta from previous captured frame: 0.000018153 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 36.780462804 seconds]
Frame Number: 12
Frame Length: 413 bytes (3304 bits)
Capture Length: 413 bytes (3304 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 397
Identification: 0x0b49 (2889)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x6e18 [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 377
Checksum: 0xa70a [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0xf8de1305
Seconds elapsed: 11
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00eaeee9
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
13 49.497369155 0.0.0.0 → 255.255.255.255 DHCP 413 DHCP Discover - Transaction ID 0x888639e4
Frame 13: 413 bytes on wire (3304 bits), 413 bytes captured (3304 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:29:34.229713536 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199374.229713536 seconds
[Time delta from previous captured frame: 12.716906351 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 49.497369155 seconds]
Frame Number: 13
Frame Length: 413 bytes (3304 bits)
Capture Length: 413 bytes (3304 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: fe:54:00:98:2f:06 (fe:54:00:98:2f:06)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 397
Identification: 0x9d62 (40290)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0xdbfe [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 377
Checksum: 0xc4dd [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x888639e4
Seconds elapsed: 28
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: fe:54:00:98:2f:06 (fe:54:00:98:2f:06)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00982f06
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
14 52.574444588 0.0.0.0 → 255.255.255.255 DHCP 413 DHCP Discover - Transaction ID 0xf8de1305
Frame 14: 413 bytes on wire (3304 bits), 413 bytes captured (3304 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:29:37.306788969 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199377.306788969 seconds
[Time delta from previous captured frame: 3.077075433 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 52.574444588 seconds]
Frame Number: 14
Frame Length: 413 bytes (3304 bits)
Capture Length: 413 bytes (3304 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 397
Identification: 0x2368 (9064)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x55f9 [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 377
Checksum: 0xa6fa [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0xf8de1305
Seconds elapsed: 27
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00eaeee9
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
15 52.574472598 0.0.0.0 → 255.255.255.255 DHCP 413 DHCP Discover - Transaction ID 0xf8de1305
Frame 15: 413 bytes on wire (3304 bits), 413 bytes captured (3304 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:29:37.306816979 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199377.306816979 seconds
[Time delta from previous captured frame: 0.000028010 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 52.574472598 seconds]
Frame Number: 15
Frame Length: 413 bytes (3304 bits)
Capture Length: 413 bytes (3304 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 397
Identification: 0x2368 (9064)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x55f9 [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 377
Checksum: 0xa6fa [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0xf8de1305
Seconds elapsed: 27
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00eaeee9
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
03:29:20 g0n dhcpcd[2923]: virbr0: using IPv4LL address 169.254.64.126 03:29:20 g0n dhcpcd[2923]: virbr0: adding route to 169.254.0.0/16 03:29:20 g0n dnsmasq[4003]: failed to create listening socket for 169.254.64.126: Permission denied 03:29:20 g0n dnsmasq[4003]: failed to create listening socket for 169.254.64.126: Permission denied 03:29:20 g0n kernel: [ 381.096891] grsec: (default:D:/) use of CAP_NET_BIND_SERVICE denied for /usr/sbin/dnsmasq[dnsmasq:4003] uid/euid:65534/65534 gid/egid:65534/65534, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0 03:29:20 g0n kernel: [ 381.096997] grsec: (default:D:/) use of CAP_NET_BIND_SERVICE denied for /usr/sbin/dnsmasq[dnsmasq:4003] uid/euid:65534/65534 gid/egid:65534/65534, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0 03:29:20 g0n kernel: [ 381.098800] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:4905] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:29:20 g0n kernel: [ 381.112837] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4908] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4905] uid/euid:0/0 gid/egid:0/0 03:29:20 g0n kernel: [ 381.113586] grsec: (root:U:/) exec of /bin/sed (sed -n s/^domain //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:4909] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4908] uid/euid:0/0 gid/egid:0/0 03:29:20 g0n kernel: [ 381.118039] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4910] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4905] uid/euid:0/0 gid/egid:0/0 03:29:20 g0n kernel: [ 381.119136] grsec: (root:U:/) exec of /bin/sed (sed -n s/^search //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:4911] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4910] uid/euid:0/0 gid/egid:0/0 03:29:20 g0n kernel: [ 381.122311] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4912] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4905] uid/euid:0/0 gid/egid:0/0 03:29:20 g0n kernel: [ 381.123997] grsec: (root:U:/) exec of /bin/sed (sed -n s/^nameserver //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:4913] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4912] uid/euid:0/0 gid/egid:0/0 03:29:20 g0n kernel: [ 381.128458] grsec: (root:U:/) exec of /usr/bin/cmp (cmp -s /etc/resolv.conf /run/dhcpcd/resolv.conf.virbr0.ipv4ll ) by /usr/bin/cmp[dhcpcd-run-hook:4915] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4905] uid/euid:0/0 gid/egid:0/0 03:29:20 g0n kernel: [ 381.130100] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.virbr0.ipv4ll ) by /bin/rm[dhcpcd-run-hook:4916] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4905] uid/euid:0/0 gid/egid:0/0 03:29:20 g0n kernel: [ 381.131800] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.virbr0.ipv4ll ) by /bin/rm[dhcpcd-run-hook:4917] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4905] uid/euid:0/0 gid/egid:0/0 03:29:20 g0n kernel: [ 381.138452] grsec: (root:U:/bin/hostname) exec of /bin/hostname (hostname ) by /bin/hostname[dhcpcd-run-hook:4919] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4918] uid/euid:0/0 gid/egid:0/0 03:29:26 g0n kernel: [ 387.229741] mrfw_dropIN=eth1 OUT= MAC=01:00:5e:00:00:01:24:9e:ab:c9:3d:77:08:00 SRC=192.168.1.1 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=47409 PROTO=2
16 53.808148911 0.0.0.0 → 255.255.255.255 DHCP 401 DHCP Discover - Transaction ID 0x10e1befc
03:29:38 g0n dnsmasq-dhcp[4003]: DHCPDISCOVER(virbr0) 52:54:00:98:2f:06 03:29:38 g0n dnsmasq-dhcp[4003]: DHCPOFFER(virbr0) 192.168.122.85 52:54:00:98:2f:06 03:29:38 g0n dnsmasq-dhcp[4003]: ARP-cache injection failed: Operation not permitted 03:29:38 g0n kernel: [ 399.362186] grsec: (default:D:/) use of CAP_NET_RAW denied for /usr/sbin/dnsmasq[dnsmasq:4003] uid/euid:65534/65534 gid/egid:65534/65534, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0 03:29:38 g0n kernel: [ 399.362289] grsec: (default:D:/) use of CAP_NET_ADMIN denied for /usr/sbin/dnsmasq[dnsmasq:4003] uid/euid:65534/65534 gid/egid:65534/65534, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0
Frame 16: 401 bytes on wire (3208 bits), 401 bytes captured (3208 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:29:38.540493292 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199378.540493292 seconds
[Time delta from previous captured frame: 1.233676313 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 53.808148911 seconds]
Frame Number: 16
Frame Length: 401 bytes (3208 bits)
Capture Length: 401 bytes (3208 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Broadcast (1)
Link-layer address type: 1
Link-layer address length: 6
Source: RealtekU_98:2f:06 (52:54:00:98:2f:06)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 385
Identification: 0xe24d (57933)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x971f [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 365
Checksum: 0x8b6d [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x10e1befc
Seconds elapsed: 0
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_98:2f:06 (52:54:00:98:2f:06)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00982f06
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 542514577
Link layer address: 52:54:00:98:2f:06
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 53
Vendor class identifier: dhcpcd-6.11.3:Linux-4.4.39-gentoo:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 6
Host Name: livecd
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
17 53.808148911 0.0.0.0 → 255.255.255.255 DHCP 401 DHCP Discover - Transaction ID 0x10e1befc
Frame 17: 401 bytes on wire (3208 bits), 401 bytes captured (3208 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:29:38.540493292 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199378.540493292 seconds
[Time delta from previous captured frame: 0.000000000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 53.808148911 seconds]
Frame Number: 17
Frame Length: 401 bytes (3208 bits)
Capture Length: 401 bytes (3208 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Broadcast (1)
Link-layer address type: 1
Link-layer address length: 6
Source: RealtekU_98:2f:06 (52:54:00:98:2f:06)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 385
Identification: 0xe24d (57933)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x971f [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 365
Checksum: 0x8b6d [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x10e1befc
Seconds elapsed: 0
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_98:2f:06 (52:54:00:98:2f:06)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00982f06
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 542514577
Link layer address: 52:54:00:98:2f:06
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 53
Vendor class identifier: dhcpcd-6.11.3:Linux-4.4.39-gentoo:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 6
Host Name: livecd
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
18 56.919482672 192.168.122.1 → 192.168.122.1 ICMP 372 Destination unreachable (Host unreachable)
Frame 18: 372 bytes on wire (2976 bits), 372 bytes captured (2976 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:29:41.651827053 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199381.651827053 seconds
[Time delta from previous captured frame: 3.111333761 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 56.919482672 seconds]
Frame Number: 18
Frame Length: 372 bytes (2976 bits)
Capture Length: 372 bytes (2976 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:icmp:ip:udp:bootp]
Linux cooked capture
Packet type: Unicast to us (0)
Link-layer address type: 772
Link-layer address length: 6
Source: 00:00:00_00:00:00 (00:00:00:00:00:00)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.122.1, Dst: 192.168.122.1
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0xc0 (DSCP: CS6, ECN: Not-ECT)
1100 00.. = Differentiated Services Codepoint: Class Selector 6 (48)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 356
Identification: 0xc707 (50951)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: ICMP (1)
Header checksum: 0x3c7e [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.122.1
Destination: 192.168.122.1
Internet Control Message Protocol
Type: 3 (Destination unreachable)
Code: 1 (Host unreachable)
Checksum: 0x73ec [correct]
[Checksum Status: Good]
Unused: 00000000
Internet Protocol Version 4, Src: 192.168.122.1, Dst: 192.168.122.85
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0xc0 (DSCP: CS6, ECN: Not-ECT)
1100 00.. = Differentiated Services Codepoint: Class Selector 6 (48)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 328
Identification: 0xcd8b (52619)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x35b2 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.122.1
Destination: 192.168.122.85
User Datagram Protocol, Src Port: bootps (67), Dst Port: bootpc (68)
Source Port: bootps (67)
Destination Port: bootpc (68)
Length: 308
Checksum: 0x99e7 [unverified]
[Checksum Status: Unverified]
[Stream index: 3]
Bootstrap Protocol (Offer)
Message type: Boot Reply (2)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x10e1befc
Seconds elapsed: 0
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 192.168.122.85
Next server IP address: 192.168.122.1
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_98:2f:06 (52:54:00:98:2f:06)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Offer)
Length: 1
DHCP: Offer (2)
Option: (54) DHCP Server Identifier
Length: 4
DHCP Server Identifier: 192.168.122.1
Option: (51) IP Address Lease Time
Length: 4
IP Address Lease Time: (3600s) 1 hour
Option: (58) Renewal Time Value
Length: 4
Renewal Time Value: (1800s) 30 minutes
Option: (59) Rebinding Time Value
Length: 4
Rebinding Time Value: (3150s) 52 minutes, 30 seconds
Option: (1) Subnet Mask
Length: 4
Subnet Mask: 255.255.255.0
Option: (28) Broadcast Address
Length: 4
Broadcast Address: 192.168.122.255
Option: (3) Router
Length: 4
Router: 192.168.122.1
Option: (6) Domain Name Server
Length: 4
Domain Name Server: 192.168.122.1
Option: (255) End
Option End: 255
Padding: 0000000000000000
19 58.489968584 0.0.0.0 → 255.255.255.255 DHCP 401 DHCP Discover - Transaction ID 0x10e1befc
03:29:43 g0n dnsmasq-dhcp[4003]: DHCPDISCOVER(virbr0) 52:54:00:98:2f:06 03:29:43 g0n dnsmasq-dhcp[4003]: DHCPOFFER(virbr0) 192.168.122.85 52:54:00:98:2f:06 03:29:43 g0n dnsmasq-dhcp[4003]: ARP-cache injection failed: Operation not permitted 03:29:43 g0n kernel: [ 404.044711] grsec: (default:D:/) use of CAP_NET_ADMIN denied for /usr/sbin/dnsmasq[dnsmasq:4003] uid/euid:65534/65534 gid/egid:65534/65534, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0
Frame 19: 401 bytes on wire (3208 bits), 401 bytes captured (3208 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:29:43.222312965 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199383.222312965 seconds
[Time delta from previous captured frame: 1.570485912 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 58.489968584 seconds]
Frame Number: 19
Frame Length: 401 bytes (3208 bits)
Capture Length: 401 bytes (3208 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Broadcast (1)
Link-layer address type: 1
Link-layer address length: 6
Source: RealtekU_98:2f:06 (52:54:00:98:2f:06)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 385
Identification: 0x614c (24908)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x1821 [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 365
Checksum: 0x8b69 [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x10e1befc
Seconds elapsed: 4
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_98:2f:06 (52:54:00:98:2f:06)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00982f06
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 542514577
Link layer address: 52:54:00:98:2f:06
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 53
Vendor class identifier: dhcpcd-6.11.3:Linux-4.4.39-gentoo:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 6
Host Name: livecd
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
20 58.489968584 0.0.0.0 → 255.255.255.255 DHCP 401 DHCP Discover - Transaction ID 0x10e1befc
Frame 20: 401 bytes on wire (3208 bits), 401 bytes captured (3208 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:29:43.222312965 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199383.222312965 seconds
[Time delta from previous captured frame: 0.000000000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 58.489968584 seconds]
Frame Number: 20
Frame Length: 401 bytes (3208 bits)
Capture Length: 401 bytes (3208 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Broadcast (1)
Link-layer address type: 1
Link-layer address length: 6
Source: RealtekU_98:2f:06 (52:54:00:98:2f:06)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 385
Identification: 0x614c (24908)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x1821 [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 365
Checksum: 0x8b69 [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x10e1befc
Seconds elapsed: 4
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_98:2f:06 (52:54:00:98:2f:06)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00982f06
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 542514577
Link layer address: 52:54:00:98:2f:06
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 53
Vendor class identifier: dhcpcd-6.11.3:Linux-4.4.39-gentoo:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 6
Host Name: livecd
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
21 61.591445548 192.168.122.1 → 192.168.122.1 ICMP 372 Destination unreachable (Host unreachable)
Frame 21: 372 bytes on wire (2976 bits), 372 bytes captured (2976 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:29:46.323789929 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199386.323789929 seconds
[Time delta from previous captured frame: 3.101476964 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 61.591445548 seconds]
Frame Number: 21
Frame Length: 372 bytes (2976 bits)
Capture Length: 372 bytes (2976 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:icmp:ip:udp:bootp]
Linux cooked capture
Packet type: Unicast to us (0)
Link-layer address type: 772
Link-layer address length: 6
Source: 00:00:00_00:00:00 (00:00:00:00:00:00)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.122.1, Dst: 192.168.122.1
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0xc0 (DSCP: CS6, ECN: Not-ECT)
1100 00.. = Differentiated Services Codepoint: Class Selector 6 (48)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 356
Identification: 0xd3d3 (54227)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: ICMP (1)
Header checksum: 0x2fb2 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.122.1
Destination: 192.168.122.1
Internet Control Message Protocol
Type: 3 (Destination unreachable)
Code: 1 (Host unreachable)
Checksum: 0x73ec [correct]
[Checksum Status: Good]
Unused: 00000000
Internet Protocol Version 4, Src: 192.168.122.1, Dst: 192.168.122.85
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0xc0 (DSCP: CS6, ECN: Not-ECT)
1100 00.. = Differentiated Services Codepoint: Class Selector 6 (48)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 328
Identification: 0xd172 (53618)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x31cb [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.122.1
Destination: 192.168.122.85
User Datagram Protocol, Src Port: bootps (67), Dst Port: bootpc (68)
Source Port: bootps (67)
Destination Port: bootpc (68)
Length: 308
Checksum: 0x99e3 [unverified]
[Checksum Status: Unverified]
[Stream index: 3]
Bootstrap Protocol (Offer)
Message type: Boot Reply (2)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x10e1befc
Seconds elapsed: 4
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 192.168.122.85
Next server IP address: 192.168.122.1
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_98:2f:06 (52:54:00:98:2f:06)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Offer)
Length: 1
DHCP: Offer (2)
Option: (54) DHCP Server Identifier
Length: 4
DHCP Server Identifier: 192.168.122.1
Option: (51) IP Address Lease Time
Length: 4
IP Address Lease Time: (3600s) 1 hour
Option: (58) Renewal Time Value
Length: 4
Renewal Time Value: (1800s) 30 minutes
Option: (59) Rebinding Time Value
Length: 4
Rebinding Time Value: (3150s) 52 minutes, 30 seconds
Option: (1) Subnet Mask
Length: 4
Subnet Mask: 255.255.255.0
Option: (28) Broadcast Address
Length: 4
Broadcast Address: 192.168.122.255
Option: (3) Router
Length: 4
Router: 192.168.122.1
Option: (6) Domain Name Server
Length: 4
Domain Name Server: 192.168.122.1
Option: (255) End
Option End: 255
Padding: 0000000000000000
22 66.162470572 0.0.0.0 → 255.255.255.255 DHCP 401 DHCP Discover - Transaction ID 0x10e1befc
03:29:50 g0n dnsmasq-dhcp[4003]: DHCPDISCOVER(virbr0) 52:54:00:98:2f:06 03:29:50 g0n dnsmasq-dhcp[4003]: DHCPOFFER(virbr0) 192.168.122.85 52:54:00:98:2f:06 03:29:50 g0n dnsmasq-dhcp[4003]: ARP-cache injection failed: Operation not permitted 03:29:50 g0n kernel: [ 411.716861] grsec: (default:D:/) use of CAP_NET_ADMIN denied for /usr/sbin/dnsmasq[dnsmasq:4003] uid/euid:65534/65534 gid/egid:65534/65534, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0
Frame 22: 401 bytes on wire (3208 bits), 401 bytes captured (3208 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:29:50.894814953 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199390.894814953 seconds
[Time delta from previous captured frame: 4.571025024 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 66.162470572 seconds]
Frame Number: 22
Frame Length: 401 bytes (3208 bits)
Capture Length: 401 bytes (3208 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Broadcast (1)
Link-layer address type: 1
Link-layer address length: 6
Source: RealtekU_98:2f:06 (52:54:00:98:2f:06)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 385
Identification: 0xa84c (43084)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0xd120 [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 365
Checksum: 0x8b61 [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x10e1befc
Seconds elapsed: 12
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_98:2f:06 (52:54:00:98:2f:06)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00982f06
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 542514577
Link layer address: 52:54:00:98:2f:06
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 53
Vendor class identifier: dhcpcd-6.11.3:Linux-4.4.39-gentoo:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 6
Host Name: livecd
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
23 66.162470572 0.0.0.0 → 255.255.255.255 DHCP 401 DHCP Discover - Transaction ID 0x10e1befc
Frame 23: 401 bytes on wire (3208 bits), 401 bytes captured (3208 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:29:50.894814953 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199390.894814953 seconds
[Time delta from previous captured frame: 0.000000000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 66.162470572 seconds]
Frame Number: 23
Frame Length: 401 bytes (3208 bits)
Capture Length: 401 bytes (3208 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Broadcast (1)
Link-layer address type: 1
Link-layer address length: 6
Source: RealtekU_98:2f:06 (52:54:00:98:2f:06)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 385
Identification: 0xa84c (43084)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0xd120 [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 365
Checksum: 0x8b61 [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x10e1befc
Seconds elapsed: 12
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_98:2f:06 (52:54:00:98:2f:06)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00982f06
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 542514577
Link layer address: 52:54:00:98:2f:06
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 53
Vendor class identifier: dhcpcd-6.11.3:Linux-4.4.39-gentoo:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 6
Host Name: livecd
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
24 69.271481552 192.168.122.1 → 192.168.122.1 ICMP 372 Destination unreachable (Host unreachable)
Frame 24: 372 bytes on wire (2976 bits), 372 bytes captured (2976 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:29:54.003825933 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199394.003825933 seconds
[Time delta from previous captured frame: 3.109010980 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 69.271481552 seconds]
Frame Number: 24
Frame Length: 372 bytes (2976 bits)
Capture Length: 372 bytes (2976 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:icmp:ip:udp:bootp]
Linux cooked capture
Packet type: Unicast to us (0)
Link-layer address type: 772
Link-layer address length: 6
Source: 00:00:00_00:00:00 (00:00:00:00:00:00)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.122.1, Dst: 192.168.122.1
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0xc0 (DSCP: CS6, ECN: Not-ECT)
1100 00.. = Differentiated Services Codepoint: Class Selector 6 (48)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 356
Identification: 0xe9a5 (59813)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: ICMP (1)
Header checksum: 0x19e0 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.122.1
Destination: 192.168.122.1
Internet Control Message Protocol
Type: 3 (Destination unreachable)
Code: 1 (Host unreachable)
Checksum: 0x73ec [correct]
[Checksum Status: Good]
Unused: 00000000
Internet Protocol Version 4, Src: 192.168.122.1, Dst: 192.168.122.85
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0xc0 (DSCP: CS6, ECN: Not-ECT)
1100 00.. = Differentiated Services Codepoint: Class Selector 6 (48)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 328
Identification: 0xddf4 (56820)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x2549 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.122.1
Destination: 192.168.122.85
User Datagram Protocol, Src Port: bootps (67), Dst Port: bootpc (68)
Source Port: bootps (67)
Destination Port: bootpc (68)
Length: 308
Checksum: 0x99db [unverified]
[Checksum Status: Unverified]
[Stream index: 3]
Bootstrap Protocol (Offer)
Message type: Boot Reply (2)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x10e1befc
Seconds elapsed: 12
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 192.168.122.85
Next server IP address: 192.168.122.1
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_98:2f:06 (52:54:00:98:2f:06)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Offer)
Length: 1
DHCP: Offer (2)
Option: (54) DHCP Server Identifier
Length: 4
DHCP Server Identifier: 192.168.122.1
Option: (51) IP Address Lease Time
Length: 4
IP Address Lease Time: (3600s) 1 hour
Option: (58) Renewal Time Value
Length: 4
Renewal Time Value: (1800s) 30 minutes
Option: (59) Rebinding Time Value
Length: 4
Rebinding Time Value: (3150s) 52 minutes, 30 seconds
Option: (1) Subnet Mask
Length: 4
Subnet Mask: 255.255.255.0
Option: (28) Broadcast Address
Length: 4
Broadcast Address: 192.168.122.255
Option: (3) Router
Length: 4
Router: 192.168.122.1
Option: (6) Domain Name Server
Length: 4
Domain Name Server: 192.168.122.1
Option: (255) End
Option End: 255
Padding: 0000000000000000
25 75.965658519 0.0.0.0 → 255.255.255.255 DHCP 410 DHCP Discover - Transaction ID 0xb6130e6e
Frame 25: 410 bytes on wire (3280 bits), 410 bytes captured (3280 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:30:00.698002900 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199400.698002900 seconds
[Time delta from previous captured frame: 6.694176967 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 75.965658519 seconds]
Frame Number: 25
Frame Length: 410 bytes (3280 bits)
Capture Length: 410 bytes (3280 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: 46:62:59:56:fe:4d (46:62:59:56:fe:4d)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 394
Identification: 0x241c (9244)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x5548 [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 374
Checksum: 0xde17 [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0xb6130e6e
Seconds elapsed: 377
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: 46:62:59:56:fe:4d (46:62:59:56:fe:4d)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 5956fe4d
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
26 81.086360528 0.0.0.0 → 255.255.255.255 DHCP 413 DHCP Discover - Transaction ID 0x888639e4
Frame 26: 413 bytes on wire (3304 bits), 413 bytes captured (3304 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:30:05.818704909 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199405.818704909 seconds
[Time delta from previous captured frame: 5.120702009 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 81.086360528 seconds]
Frame Number: 26
Frame Length: 413 bytes (3304 bits)
Capture Length: 413 bytes (3304 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: fe:54:00:98:2f:06 (fe:54:00:98:2f:06)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 397
Identification: 0x29ef (10735)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x4f72 [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 377
Checksum: 0xc4bd [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x888639e4
Seconds elapsed: 60
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: fe:54:00:98:2f:06 (fe:54:00:98:2f:06)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00982f06
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
03:30:01 g0n kernel: [ 422.280796] grsec: (root:U:/usr/sbin/crond) chdir to
/root by /usr/sbin/crond[crond:4930] uid/euid:0/0 gid/egid:0/0, parent
/usr/sbin/crond[crond:3638] uid/euid:0/0 gid/egid:0/0
03:30:01 g0n kernel: [ 422.281042] grsec: (root:U:/bin/bash) exec of /bin/bash
(/bin/sh -c test -x /usr/sbin/run-crons && /usr/sbin/run-crons ) by
/bin/bash[crond:4930] uid/euid:0/0 gid/egid:0/0, parent
/usr/sbin/crond[crond:3638] uid/euid:0/0 gid/egid:0/0
03:30:01 g0n kernel: [ 422.302554] grsec: (root:U:/usr/sbin/run-crons) exec of
/usr/sbin/run-crons (/usr/sbin/run-crons ) by /usr/sbin/run-crons[sh:4930]
uid/euid:0/0 gid/egid:0/0, parent /usr/sbin/crond[crond:3638] uid/euid:0/0
gid/egid:0/0
03:30:01 g0n kernel: [ 422.306215] grsec: (root:U:/bin/mkdir) exec of
/bin/mkdir (mkdir -p /var/spool/cron/lastrun ) by /bin/mkdir[run-crons:4933]
uid/euid:0/0 gid/egid:0/0, parent /usr/sbin/run-crons[run-crons:4930]
uid/euid:0/0 gid/egid:0/0
03:30:01 g0n kernel: [ 422.307007] grsec: (root:U:/bin/mkdir) chdir to /var by
/bin/mkdir[mkdir:4933] uid/euid:0/0 gid/egid:0/0, parent
/usr/sbin/run-crons[run-crons:4930] uid/euid:0/0 gid/egid:0/0
03:30:01 g0n kernel: [ 422.307021] grsec: (root:U:/bin/mkdir) chdir to
/var/spool by /bin/mkdir[mkdir:4933] uid/euid:0/0 gid/egid:0/0, parent
/usr/sbin/run-crons[run-crons:4930] uid/euid:0/0 gid/egid:0/0
03:30:01 g0n kernel: [ 422.307034] grsec: (root:U:/bin/mkdir) chdir to
/var/spool/cron by /bin/mkdir[mkdir:4933] uid/euid:0/0 gid/egid:0/0, parent
/usr/sbin/run-crons[run-crons:4930] uid/euid:0/0 gid/egid:0/0
03:30:01 g0n kernel: [ 422.308331] grsec: (root:U:/bin/ln) exec of /bin/ln (ln
-sn 4930 /var/spool/cron/lastrun/lock ) by /bin/ln[run-crons:4934] uid/euid:0/0
gid/egid:0/0, parent /usr/sbin/run-crons[run-crons:4930] uid/euid:0/0
gid/egid:0/0
03:30:01 g0n kernel: [ 422.325074] grsec: (root:U:/) exec of /bin/readlink
(readlink /var/spool/cron/lastrun/lock ) by /bin/readlink[run-crons:4936]
uid/euid:0/0 gid/egid:0/0, parent /usr/sbin/run-crons[run-crons:4935]
uid/euid:0/0 gid/egid:0/0
03:30:01 g0n kernel: [ 422.334148] grsec: (root:U:/bin/rm) exec of /bin/rm (rm
-f /var/spool/cron/lastrun/lock ) by /bin/rm[run-crons:4939] uid/euid:0/0
gid/egid:0/0, parent /usr/sbin/run-crons[run-crons:4930] uid/euid:0/0
gid/egid:0/0
03:30:01 g0n kernel: [ 422.336386] grsec: (root:U:/bin/ln) exec of /bin/ln (ln
-sn 4930 /var/spool/cron/lastrun/lock ) by /bin/ln[run-crons:4940] uid/euid:0/0
gid/egid:0/0, parent /usr/sbin/run-crons[run-crons:4930] uid/euid:0/0
gid/egid:0/0
03:30:01 g0n kernel: [ 422.339051] grsec: (root:U:/bin/touch) exec of
/bin/touch (touch /var/spool/cron/lastrun/cron.hourly ) by
/bin/touch[run-crons:4941] uid/euid:0/0 gid/egid:0/0, parent
/usr/sbin/run-crons[run-crons:4930] uid/euid:0/0 gid/egid:0/0
03:30:01 g0n kernel: [ 422.361469] grsec: (root:U:/) exec of /usr/bin/find
(find /var/spool/cron/lastrun -name cron.daily -cmin +1445 -exec rm {} ; ) by
/usr/bin/find[run-crons:4942] uid/euid:0/0 gid/egid:0/0, parent
/usr/sbin/run-crons[run-crons:4930] uid/euid:0/0 gid/egid:0/0
03:30:01 g0n kernel: [ 422.363473] grsec: (root:U:/) chdir to /root by
/usr/bin/find[find:4942] uid/euid:0/0 gid/egid:0/0, parent
/usr/sbin/run-crons[run-crons:4930] uid/euid:0/0 gid/egid:0/0
03:30:01 g0n kernel: [ 422.365090] grsec: (root:U:/) exec of /usr/bin/find
(find /var/spool/cron/lastrun -name cron.weekly -cmin +10085 -exec rm {} ; ) by
/usr/bin/find[run-crons:4943] uid/euid:0/0 gid/egid:0/0, parent
/usr/sbin/run-crons[run-crons:4930] uid/euid:0/0 gid/egid:0/0
03:30:01 g0n kernel: [ 422.366284] grsec: (root:U:/) chdir to /root by
/usr/bin/find[find:4943] uid/euid:0/0 gid/egid:0/0, parent
/usr/sbin/run-crons[run-crons:4930] uid/euid:0/0 gid/egid:0/0
03:30:01 g0n kernel: [ 422.367720] grsec: (root:U:/) exec of /usr/bin/find
(find /var/spool/cron/lastrun -name cron.monthly -cmin +44645 -exec rm {} ; )
by /usr/bin/find[run-crons:4944] uid/euid:0/0 gid/egid:0/0, parent
/usr/sbin/run-crons[run-crons:4930] uid/euid:0/0 gid/egid:0/0
03:30:01 g0n kernel: [ 422.368871] grsec: (root:U:/) chdir to /root by
/usr/bin/find[find:4944] uid/euid:0/0 gid/egid:0/0, parent
/usr/sbin/run-crons[run-crons:4930] uid/euid:0/0 gid/egid:0/0
03:30:01 g0n kernel: [ 422.369868] grsec: (root:U:/bin/touch) exec of
/bin/touch (touch /var/spool/cron/lastrun ) by /bin/touch[run-crons:4945]
uid/euid:0/0 gid/egid:0/0, parent /usr/sbin/run-crons[run-crons:4930]
uid/euid:0/0 gid/egid:0/0
03:30:01 g0n kernel: [ 422.371759] grsec: (root:U:/) exec of /usr/bin/find
(find /var/spool/cron/lastrun -newer /var/spool/cron/lastrun -exec /bin/rm -f
{} ; ) by /usr/bin/find[run-crons:4946] uid/euid:0/0 gid/egid:0/0, parent
/usr/sbin/run-crons[run-crons:4930] uid/euid:0/0 gid/egid:0/0
03:30:01 g0n kernel: [ 422.373106] grsec: (root:U:/) chdir to /root by
/usr/bin/find[find:4946] uid/euid:0/0 gid/egid:0/0, parent
/usr/sbin/run-crons[run-crons:4930] uid/euid:0/0 gid/egid:0/0
03:30:01 g0n kernel: [ 422.374379] grsec: (root:U:/bin/rm) exec of /bin/rm (rm
-f /var/spool/cron/lastrun/lock ) by /bin/rm[run-crons:4947] uid/euid:0/0
gid/egid:0/0, parent /usr/sbin/run-crons[run-crons:4930] uid/euid:0/0
gid/egid:0/0
27 81.508068401 0.0.0.0 → 255.255.255.255 DHCP 401 DHCP Discover - Transaction ID 0x10e1befc
03:30:06 g0n kernel: [ 427.062708] grsec: (default:D:/) use of CAP_NET_ADMIN denied for /usr/sbin/dnsmasq[dnsmasq:4003] uid/euid:65534/65534 gid/egid:65534/65534, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0 03:30:06 g0n dnsmasq-dhcp[4003]: DHCPDISCOVER(virbr0) 52:54:00:98:2f:06 03:30:06 g0n dnsmasq-dhcp[4003]: DHCPOFFER(virbr0) 192.168.122.85 52:54:00:98:2f:06 03:30:06 g0n dnsmasq-dhcp[4003]: ARP-cache injection failed: Operation not permitted
Frame 27: 401 bytes on wire (3208 bits), 401 bytes captured (3208 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:30:06.240412782 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199406.240412782 seconds
[Time delta from previous captured frame: 0.421707873 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 81.508068401 seconds]
Frame Number: 27
Frame Length: 401 bytes (3208 bits)
Capture Length: 401 bytes (3208 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Broadcast (1)
Link-layer address type: 1
Link-layer address length: 6
Source: RealtekU_98:2f:06 (52:54:00:98:2f:06)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 385
Identification: 0x9266 (37478)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0xe706 [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 365
Checksum: 0x8b52 [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x10e1befc
Seconds elapsed: 27
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_98:2f:06 (52:54:00:98:2f:06)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00982f06
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 542514577
Link layer address: 52:54:00:98:2f:06
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 53
Vendor class identifier: dhcpcd-6.11.3:Linux-4.4.39-gentoo:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 6
Host Name: livecd
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
28 81.508068401 0.0.0.0 → 255.255.255.255 DHCP 401 DHCP Discover - Transaction ID 0x10e1befc
Frame 28: 401 bytes on wire (3208 bits), 401 bytes captured (3208 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:30:06.240412782 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199406.240412782 seconds
[Time delta from previous captured frame: 0.000000000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 81.508068401 seconds]
Frame Number: 28
Frame Length: 401 bytes (3208 bits)
Capture Length: 401 bytes (3208 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Broadcast (1)
Link-layer address type: 1
Link-layer address length: 6
Source: RealtekU_98:2f:06 (52:54:00:98:2f:06)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 385
Identification: 0x9266 (37478)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0xe706 [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 365
Checksum: 0x8b52 [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x10e1befc
Seconds elapsed: 27
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_98:2f:06 (52:54:00:98:2f:06)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00982f06
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 542514577
Link layer address: 52:54:00:98:2f:06
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 53
Vendor class identifier: dhcpcd-6.11.3:Linux-4.4.39-gentoo:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 6
Host Name: livecd
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
29 84.121686987 0.0.0.0 → 255.255.255.255 DHCP 413 DHCP Discover - Transaction ID 0xf8de1305
Frame 29: 413 bytes on wire (3304 bits), 413 bytes captured (3304 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:30:08.854031368 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199408.854031368 seconds
[Time delta from previous captured frame: 2.613618586 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 84.121686987 seconds]
Frame Number: 29
Frame Length: 413 bytes (3304 bits)
Capture Length: 413 bytes (3304 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 397
Identification: 0x798e (31118)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0xffd2 [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 377
Checksum: 0xa6db [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0xf8de1305
Seconds elapsed: 58
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00eaeee9
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
30 84.121729495 0.0.0.0 → 255.255.255.255 DHCP 413 DHCP Discover - Transaction ID 0xf8de1305
Frame 30: 413 bytes on wire (3304 bits), 413 bytes captured (3304 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:30:08.854073876 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199408.854073876 seconds
[Time delta from previous captured frame: 0.000042508 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 84.121729495 seconds]
Frame Number: 30
Frame Length: 413 bytes (3304 bits)
Capture Length: 413 bytes (3304 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 397
Identification: 0x798e (31118)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0xffd2 [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 377
Checksum: 0xa6db [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0xf8de1305
Seconds elapsed: 58
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00eaeee9
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
31 84.567463765 192.168.122.1 → 192.168.122.1 ICMP 372 Destination unreachable (Host unreachable)
Frame 31: 372 bytes on wire (2976 bits), 372 bytes captured (2976 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:30:09.299808146 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199409.299808146 seconds
[Time delta from previous captured frame: 0.445734270 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 84.567463765 seconds]
Frame Number: 31
Frame Length: 372 bytes (2976 bits)
Capture Length: 372 bytes (2976 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:icmp:ip:udp:bootp]
Linux cooked capture
Packet type: Unicast to us (0)
Link-layer address type: 772
Link-layer address length: 6
Source: 00:00:00_00:00:00 (00:00:00:00:00:00)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.122.1, Dst: 192.168.122.1
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0xc0 (DSCP: CS6, ECN: Not-ECT)
1100 00.. = Differentiated Services Codepoint: Class Selector 6 (48)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 356
Identification: 0x0cb4 (3252)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: ICMP (1)
Header checksum: 0xf6d1 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.122.1
Destination: 192.168.122.1
Internet Control Message Protocol
Type: 3 (Destination unreachable)
Code: 1 (Host unreachable)
Checksum: 0x73ec [correct]
[Checksum Status: Good]
Unused: 00000000
Internet Protocol Version 4, Src: 192.168.122.1, Dst: 192.168.122.85
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0xc0 (DSCP: CS6, ECN: Not-ECT)
1100 00.. = Differentiated Services Codepoint: Class Selector 6 (48)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 328
Identification: 0x0829 (2089)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0xfb14 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.122.1
Destination: 192.168.122.85
User Datagram Protocol, Src Port: bootps (67), Dst Port: bootpc (68)
Source Port: bootps (67)
Destination Port: bootpc (68)
Length: 308
Checksum: 0x99cc [unverified]
[Checksum Status: Unverified]
[Stream index: 3]
Bootstrap Protocol (Offer)
Message type: Boot Reply (2)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x10e1befc
Seconds elapsed: 27
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 192.168.122.85
Next server IP address: 192.168.122.1
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_98:2f:06 (52:54:00:98:2f:06)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Offer)
Length: 1
DHCP: Offer (2)
Option: (54) DHCP Server Identifier
Length: 4
DHCP Server Identifier: 192.168.122.1
Option: (51) IP Address Lease Time
Length: 4
IP Address Lease Time: (3600s) 1 hour
Option: (58) Renewal Time Value
Length: 4
Renewal Time Value: (1800s) 30 minutes
Option: (59) Rebinding Time Value
Length: 4
Rebinding Time Value: (3150s) 52 minutes, 30 seconds
Option: (1) Subnet Mask
Length: 4
Subnet Mask: 255.255.255.0
Option: (28) Broadcast Address
Length: 4
Broadcast Address: 192.168.122.255
Option: (3) Router
Length: 4
Router: 192.168.122.1
Option: (6) Domain Name Server
Length: 4
Domain Name Server: 192.168.122.1
Option: (255) End
Option End: 255
Padding: 0000000000000000
03:30:20 g0n dhcpcd[2923]: vnet0: carrier lost 03:30:20 g0n kernel: [ 441.690116] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:4950] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.701640] virbr0: port 2(vnet0) entered disabled state 03:30:20 g0n kernel: [ 441.701899] device vnet0 left promiscuous mode 03:30:20 g0n kernel: [ 441.701903] virbr0: port 2(vnet0) entered disabled state 03:30:20 g0n dnsmasq[4003]: failed to create listening socket for 169.254.64.126: Permission denied 03:30:20 g0n dnsmasq[4003]: failed to create listening socket for 169.254.64.126: Permission denied 03:30:20 g0n dnsmasq[4003]: failed to create listening socket for 169.254.64.126: Permission denied 03:30:20 g0n dnsmasq[4003]: failed to create listening socket for 169.254.64.126: Permission denied 03:30:20 g0n kernel: [ 441.703625] grsec: (default:D:/) use of CAP_NET_BIND_SERVICE denied for /usr/sbin/dnsmasq[dnsmasq:4003] uid/euid:65534/65534 gid/egid:65534/65534, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.703693] grsec: (default:D:/) use of CAP_NET_BIND_SERVICE denied for /usr/sbin/dnsmasq[dnsmasq:4003] uid/euid:65534/65534 gid/egid:65534/65534, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.703814] grsec: (default:D:/) use of CAP_NET_BIND_SERVICE denied for /usr/sbin/dnsmasq[dnsmasq:4003] uid/euid:65534/65534 gid/egid:65534/65534, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.703845] grsec: (default:D:/) use of CAP_NET_BIND_SERVICE denied for /usr/sbin/dnsmasq[dnsmasq:4003] uid/euid:65534/65534 gid/egid:65534/65534, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.705250] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4958] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4950] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.705902] grsec: (root:U:/) exec of /bin/sed (sed -n s/^domain //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:4959] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4958] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.707211] grsec: (root:U:/) exec of /lib64/udev/net.sh (/lib/udev/net.sh vnet0 stop ) by /lib64/udev/net.sh[udevd:4960] uid/euid:0/0 gid/egid:0/0, parent /sbin/udevd[udevd:4957] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.709043] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4961] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4950] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.709688] grsec: (root:U:/) exec of /bin/sed (sed -n s/^search //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:4963] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4961] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.712167] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4964] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4950] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.712771] grsec: (root:U:/) exec of /bin/sed (sed -n s/^nameserver //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:4965] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4964] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.720910] grsec: (root:U:/) exec of /usr/bin/cmp (cmp -s /etc/resolv.conf /run/dhcpcd/resolv.conf.vnet0.dhcp ) by /usr/bin/cmp[dhcpcd-run-hook:4967] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4950] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.724071] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.vnet0.dhcp ) by /bin/rm[dhcpcd-run-hook:4968] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4950] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.725967] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.vnet0.dhcp ) by /bin/rm[dhcpcd-run-hook:4969] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4950] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n dhcpcd[2923]: vnet0: deleting address fe80::9326:ba01:4521:ee7f 03:30:20 g0n dhcpcd[2923]: vnet0: deleting route to 169.254.0.0/16 03:30:20 g0n kernel: [ 441.737399] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:4971] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.747670] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4973] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4971] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.748481] grsec: (root:U:/) exec of /bin/sed (sed -n s/^domain //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:4974] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4973] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.751688] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4975] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4971] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.752638] grsec: (root:U:/) exec of /bin/sed (sed -n s/^search //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:4976] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4975] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.757822] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4977] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4971] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.758546] grsec: (root:U:/) exec of /bin/sed (sed -n s/^nameserver //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:4978] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4977] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.763807] grsec: (root:U:/) exec of /usr/bin/cmp (cmp -s /etc/resolv.conf /run/dhcpcd/resolv.conf.vnet0.ipv4ll ) by /usr/bin/cmp[dhcpcd-run-hook:4980] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4971] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.765150] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.vnet0.ipv4ll ) by /bin/rm[dhcpcd-run-hook:4981] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4971] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.766449] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.vnet0.ipv4ll ) by /bin/rm[dhcpcd-run-hook:4982] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4971] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.778560] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:4984] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.790709] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4986] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4984] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.792474] grsec: (root:U:/) exec of /bin/sed (sed -n s/^domain //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:4987] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4986] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.795640] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4988] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4984] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.796445] grsec: (root:U:/) exec of /bin/sed (sed -n s/^search //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:4989] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4988] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.799722] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4990] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4984] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.800559] grsec: (root:U:/) exec of /bin/sed (sed -n s/^nameserver //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:4991] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4990] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.805840] grsec: (root:U:/) exec of /usr/bin/cmp (cmp -s /etc/resolv.conf /run/dhcpcd/resolv.conf.vnet0.dhcp ) by /usr/bin/cmp[dhcpcd-run-hook:4993] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4984] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.807736] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.vnet0.dhcp ) by /bin/rm[dhcpcd-run-hook:4994] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4984] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n kernel: [ 441.809508] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.vnet0.dhcp ) by /bin/rm[dhcpcd-run-hook:4995] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4984] uid/euid:0/0 gid/egid:0/0 03:30:20 g0n dhcpcd[2923]: vnet0: removing interface 03:30:20 g0n kernel: [ 441.821115] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:4997] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.831530] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4999] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4997] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.832332] grsec: (root:U:/) exec of /bin/sed (sed -n s/^domain //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:5000] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4999] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.835379] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5001] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4997] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.836571] grsec: (root:U:/) exec of /bin/sed (sed -n s/^search //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:5002] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5001] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.840288] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5003] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4997] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.841405] grsec: (root:U:/) exec of /bin/sed (sed -n s/^nameserver //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:5004] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5003] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.848683] grsec: (root:U:/) exec of /usr/bin/cmp (cmp -s /etc/resolv.conf /run/dhcpcd/resolv.conf.vnet0.dhcp ) by /usr/bin/cmp[dhcpcd-run-hook:5006] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4997] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.850366] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.vnet0.dhcp ) by /bin/rm[dhcpcd-run-hook:5007] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4997] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.851966] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.vnet0.dhcp ) by /bin/rm[dhcpcd-run-hook:5008] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:4997] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.859870] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:5010] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.870610] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5012] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5010] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.873003] grsec: (root:U:/) exec of /bin/sed (sed -n s/^domain //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:5013] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5012] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.877263] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5014] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5010] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.878208] grsec: (root:U:/) exec of /bin/sed (sed -n s/^search //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:5015] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5014] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.881436] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5016] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5010] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.882119] grsec: (root:U:/) exec of /bin/sed (sed -n s/^nameserver //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:5017] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5016] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.886571] grsec: (root:U:/) exec of /usr/bin/cmp (cmp -s /etc/resolv.conf /run/dhcpcd/resolv.conf.vnet0.dhcp ) by /usr/bin/cmp[dhcpcd-run-hook:5019] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5010] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.888495] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.vnet0.dhcp ) by /bin/rm[dhcpcd-run-hook:5020] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5010] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.890378] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.vnet0.dhcp ) by /bin/rm[dhcpcd-run-hook:5021] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5010] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n dhcpcd[2923]: virbr0: carrier lost 03:30:21 g0n kernel: [ 441.898819] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:5023] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.911443] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5025] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5023] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.913946] grsec: (root:U:/) exec of /bin/sed (sed -n s/^domain //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:5026] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5025] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.919722] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5027] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5023] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.921244] grsec: (root:U:/) exec of /bin/sed (sed -n s/^search //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:5028] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5027] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.924980] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5029] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5023] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.925709] grsec: (root:U:/) exec of /bin/sed (sed -n s/^nameserver //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:5030] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5029] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.930693] grsec: (root:U:/) exec of /usr/bin/cmp (cmp -s /etc/resolv.conf /run/dhcpcd/resolv.conf.virbr0.dhcp ) by /usr/bin/cmp[dhcpcd-run-hook:5032] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5023] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.932614] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.virbr0.dhcp ) by /bin/rm[dhcpcd-run-hook:5033] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5023] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.934725] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.virbr0.dhcp ) by /bin/rm[dhcpcd-run-hook:5034] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5023] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.951220] grsec: (miro:U:/bin/bash) exec of /bin/bash (sh -c "/usr/bin/xkbcomp" -w 1 "-R/usr/share/X11/xkb" -xkm "-" -em1 "The XKEYBOARD keymap compiler (xkbcomp) reports:" -emp "> " ) by /bin/bash[X:5036] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/Xorg[X:4418] uid/euid:1000/0 gid/egid:1000/1000 03:30:21 g0n kernel: [ 441.955747] grsec: (miro:U:/) exec of /usr/bin/xkbcomp (/usr/bin/xkbcomp -w 1 -R/usr/share/X11/xkb -xkm - -em1 The XKEYBOARD keymap compiler (xkbcomp) reports: -emp > -eml Errors from) by /usr/bin/xkbcomp[sh:5036] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/Xorg[X:4418] uid/euid:1000/0 gid/egid:1000/1000 03:30:21 g0n dhcpcd[2923]: virbr0: deleting route to 169.254.0.0/16 03:30:21 g0n kernel: [ 441.956752] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:5037] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.957521] grsec: (miro:U:/) chdir to /usr/share/X11/xkb by /usr/bin/xkbcomp[xkbcomp:5036] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/Xorg[X:4418] uid/euid:1000/0 gid/egid:1000/1000 03:30:21 g0n kernel: [ 441.965249] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5039] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5037] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.965940] grsec: (root:U:/) exec of /bin/sed (sed -n s/^domain //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:5040] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5039] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.968047] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5041] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5037] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.968761] grsec: (root:U:/) exec of /bin/sed (sed -n s/^search //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:5042] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5041] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.971411] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5043] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5037] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.972208] grsec: (root:U:/) exec of /bin/sed (sed -n s/^nameserver //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:5044] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5043] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.976702] grsec: (root:U:/) exec of /usr/bin/cmp (cmp -s /etc/resolv.conf /run/dhcpcd/resolv.conf.virbr0.ipv4ll ) by /usr/bin/cmp[dhcpcd-run-hook:5046] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5037] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.978423] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.virbr0.ipv4ll ) by /bin/rm[dhcpcd-run-hook:5047] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5037] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.979896] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.virbr0.ipv4ll ) by /bin/rm[dhcpcd-run-hook:5048] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5037] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 441.991376] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:5050] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.002264] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5052] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5050] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.002987] grsec: (root:U:/) exec of /bin/sed (sed -n s/^domain //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:5053] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5052] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.005660] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5054] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5050] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.006436] grsec: (root:U:/) exec of /bin/sed (sed -n s/^search //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:5055] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5054] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.008808] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5056] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5050] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.009400] grsec: (root:U:/) exec of /bin/sed (sed -n s/^nameserver //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:5057] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5056] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.013180] grsec: (root:U:/) exec of /usr/bin/cmp (cmp -s /etc/resolv.conf /run/dhcpcd/resolv.conf.virbr0.dhcp ) by /usr/bin/cmp[dhcpcd-run-hook:5059] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5050] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.014587] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.virbr0.dhcp ) by /bin/rm[dhcpcd-run-hook:5060] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5050] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.015849] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.virbr0.dhcp ) by /bin/rm[dhcpcd-run-hook:5061] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5050] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.282390] grsec: (root:U:/) exec of /lib64/udev/net.sh (/lib/udev/net.sh vnet0 start ) by /lib64/udev/net.sh[udevd:5088] uid/euid:0/0 gid/egid:0/0, parent /sbin/udevd[udevd:4957] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.282999] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:5089] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.293768] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:5090] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.306449] virbr0: port 2(vnet0) entered blocking state 03:30:21 g0n kernel: [ 442.306454] virbr0: port 2(vnet0) entered disabled state 03:30:21 g0n kernel: [ 442.306618] device vnet0 entered promiscuous mode 03:30:21 g0n kernel: [ 442.308294] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5092] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5090] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.308929] grsec: (root:U:/) exec of /bin/sed (sed -n s/^domain //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:5093] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5092] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.310160] virbr0: port 2(vnet0) entered blocking state 03:30:21 g0n kernel: [ 442.310165] virbr0: port 2(vnet0) entered listening state 03:30:21 g0n kernel: [ 442.311576] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5094] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5090] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.312250] grsec: (root:U:/) exec of /bin/sed (sed -n s/^search //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:5095] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5094] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.314750] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5096] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5090] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.315377] grsec: (root:U:/) exec of /bin/sed (sed -n s/^nameserver //p eth1.dhcp eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:5097] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5096] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.319409] grsec: (root:U:/) exec of /usr/bin/cmp (cmp -s /etc/resolv.conf /run/dhcpcd/resolv.conf.vnet0.dhcp ) by /usr/bin/cmp[dhcpcd-run-hook:5099] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5090] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.320751] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.vnet0.dhcp ) by /bin/rm[dhcpcd-run-hook:5100] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5090] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.322266] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.vnet0.dhcp ) by /bin/rm[dhcpcd-run-hook:5101] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5090] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.325135] grsec: (root:U:/usr/sbin/libvirtd) chdir to / by /usr/sbin/libvirtd[libvirtd:5102] uid/euid:0/0 gid/egid:0/0, parent /usr/sbin/libvirtd[libvirtd:3907] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n dhcpcd[2923]: vnet0: waiting for carrier 03:30:21 g0n dhcpcd[2923]: vnet0: carrier acquired 03:30:21 g0n kernel: [ 442.329389] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:5105] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.329901] grsec: (qemu:U:/) exec of /usr/bin/qemu-system-x86_64 (/usr/bin/qemu-system-x86_64 -name guest=gentoo22,debug-threads=on -S -object secret,id=masterKey0,format=raw,file=/var/lib/libvi) by /usr/bin/qemu-system-x86_64[libvirtd:5104] uid/euid:77/77 gid/egid:77/77, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n dhcpcd[2923]: vnet0: IAID 00:98:2f:06 03:30:21 g0n dhcpcd[2923]: vnet0: adding address fe80::9326:ba01:4521:ee7f 03:30:21 g0n qemu-system-x86_64: SQL engine 'mysql' not supported 03:30:21 g0n qemu-system-x86_64: auxpropfunc error no mechanism available 03:30:21 g0n qemu-system-x86_64: _sasl_plugin_load failed on sasl_auxprop_plug_init for plugin: sql 03:30:21 g0n kernel: [ 442.458808] grsec: (miro:U:/usr/bin/virt-viewer) exec of /usr/bin/virt-viewer (virt-viewer --connect qemu:///system --wait gentoo22 ) by /usr/bin/virt-viewer[python2.7:5111] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/python2.7[python2.7:4811] uid/euid:1000/1000 gid/egid:1000/1000 03:30:21 g0n kernel: [ 442.541004] grsec: (miro:U:/bin/bash) exec of /bin/bash (sh -c "/usr/bin/xkbcomp" -w 1 "-R/usr/share/X11/xkb" -xkm "-" -em1 "The XKEYBOARD keymap compiler (xkbcomp) reports:" -emp "> " ) by /bin/bash[X:5112] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/Xorg[X:4418] uid/euid:1000/0 gid/egid:1000/1000 03:30:21 g0n kernel: [ 442.545528] grsec: (miro:U:/) exec of /usr/bin/xkbcomp (/usr/bin/xkbcomp -w 1 -R/usr/share/X11/xkb -xkm - -em1 The XKEYBOARD keymap compiler (xkbcomp) reports: -emp > -eml Errors from) by /usr/bin/xkbcomp[sh:5112] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/Xorg[X:4418] uid/euid:1000/0 gid/egid:1000/1000 03:30:21 g0n kernel: [ 442.548114] grsec: (miro:U:/) chdir to /usr/share/X11/xkb by /usr/bin/xkbcomp[xkbcomp:5112] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/Xorg[X:4418] uid/euid:1000/0 gid/egid:1000/1000 03:30:21 g0n kernel: [ 442.755039] sky2 0000:06:00.0 eth1: Link is down 03:30:21 g0n dhcpcd[2923]: eth1: carrier lost 03:30:21 g0n kernel: [ 442.758720] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:5115] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.766712] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf/eth1.dhcp ) by /bin/rm[dhcpcd-run-hook:5116] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5115] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.771552] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5118] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5115] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.772536] grsec: (root:U:/) exec of /bin/sed (sed -n s/^domain //p eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:5119] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5118] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.778385] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5120] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5115] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.779047] grsec: (root:U:/) exec of /bin/sed (sed -n s/^search //p eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:5121] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5120] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.781864] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5122] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5115] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.782643] grsec: (root:U:/) exec of /bin/sed (sed -n s/^nameserver //p eth1.dhcp6 eth1.ra ) by /bin/sed[dhcpcd-run-hook:5123] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5122] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.787964] grsec: (root:U:/) exec of /usr/bin/cmp (cmp -s /etc/resolv.conf /run/dhcpcd/resolv.conf.eth1.dhcp ) by /usr/bin/cmp[dhcpcd-run-hook:5125] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5115] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.790971] grsec: (root:U:/) exec of /bin/cat (cat /run/dhcpcd/resolv.conf.eth1.dhcp ) by /bin/cat[dhcpcd-run-hook:5126] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5115] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n dnsmasq[4003]: reading /etc/resolv.conf 03:30:21 g0n dnsmasq[4003]: using nameserver fe80::1%eth1#53 03:30:21 g0n kernel: [ 442.794962] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.eth1.dhcp ) by /bin/rm[dhcpcd-run-hook:5127] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5115] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.796712] grsec: (root:U:/bin/chmod) exec of /bin/chmod (chmod 644 /etc/resolv.conf ) by /bin/chmod[dhcpcd-run-hook:5128] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5115] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.798220] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.eth1.dhcp ) by /bin/rm[dhcpcd-run-hook:5129] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5115] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.805134] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:5131] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.812718] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf/eth1.dhcp6 ) by /bin/rm[dhcpcd-run-hook:5132] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5131] uid/euid:0/0 gid/egid:0/0 03:30:21 g0n kernel: [ 442.820550] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5134] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5131] uid/euid:0/0 gid/egid:0/0
32 97.469649504 0.0.0.0 → 255.255.255.255 DHCP 413 DHCP Discover - Transaction ID 0x4198f255
03:30:22 g0n kernel: [ 442.822417] grsec: (root:U:/) exec of /bin/sed (sed -n s/^domain //p eth1.ra ) by /bin/sed[dhcpcd-run-hook:5135] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5134] uid/euid:0/0 gid/egid:0/0 03:30:22 g0n kernel: [ 442.825112] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5136] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5131] uid/euid:0/0 gid/egid:0/0 03:30:22 g0n kernel: [ 442.825704] grsec: (root:U:/) exec of /bin/sed (sed -n s/^search //p eth1.ra ) by /bin/sed[dhcpcd-run-hook:5137] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5136] uid/euid:0/0 gid/egid:0/0 03:30:22 g0n kernel: [ 442.827993] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) chdir to /run/dhcpcd/resolv.conf by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5138] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5131] uid/euid:0/0 gid/egid:0/0 03:30:22 g0n kernel: [ 442.828523] grsec: (root:U:/) exec of /bin/sed (sed -n s/^nameserver //p eth1.ra ) by /bin/sed[dhcpcd-run-hook:5139] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5138] uid/euid:0/0 gid/egid:0/0 03:30:22 g0n kernel: [ 442.831779] grsec: (root:U:/) exec of /usr/bin/cmp (cmp -s /etc/resolv.conf /run/dhcpcd/resolv.conf.eth1.dhcp6 ) by /usr/bin/cmp[dhcpcd-run-hook:5141] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5131] uid/euid:0/0 gid/egid:0/0 03:30:22 g0n kernel: [ 442.833145] grsec: (root:U:/) exec of /bin/cat (cat /run/dhcpcd/resolv.conf.eth1.dhcp6 ) by /bin/cat[dhcpcd-run-hook:5142] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5131] uid/euid:0/0 gid/egid:0/0 03:30:22 g0n dnsmasq[4003]: reading /etc/resolv.conf 03:30:22 g0n dnsmasq[4003]: using nameserver fe80::1%eth1#53 03:30:22 g0n kernel: [ 442.834773] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.eth1.dhcp6 ) by /bin/rm[dhcpcd-run-hook:5143] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5131] uid/euid:0/0 gid/egid:0/0 03:30:22 g0n kernel: [ 442.836503] grsec: (root:U:/bin/chmod) exec of /bin/chmod (chmod 644 /etc/resolv.conf ) by /bin/chmod[dhcpcd-run-hook:5144] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5131] uid/euid:0/0 gid/egid:0/0 03:30:22 g0n kernel: [ 442.837962] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.eth1.dhcp6 ) by /bin/rm[dhcpcd-run-hook:5145] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5131] uid/euid:0/0 gid/egid:0/0 03:30:22 g0n dhcpcd[2923]: eth1: deleting default route via fe80::1 03:30:22 g0n kernel: [ 442.843945] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:5147] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:30:22 g0n kernel: [ 442.850638] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf/eth1.ra ) by /bin/rm[dhcpcd-run-hook:5148] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5147] uid/euid:0/0 gid/egid:0/0 03:30:22 g0n kernel: [ 442.854258] grsec: (root:U:/) exec of /usr/bin/cmp (cmp -s /etc/resolv.conf /run/dhcpcd/resolv.conf.eth1.ra ) by /usr/bin/cmp[dhcpcd-run-hook:5150] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5147] uid/euid:0/0 gid/egid:0/0 03:30:22 g0n kernel: [ 442.856068] grsec: (root:U:/) exec of /bin/cat (cat /run/dhcpcd/resolv.conf.eth1.ra ) by /bin/cat[dhcpcd-run-hook:5151] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5147] uid/euid:0/0 gid/egid:0/0 03:30:22 g0n dnsmasq[4003]: no servers found in /etc/resolv.conf, will retry 03:30:22 g0n kernel: [ 442.858066] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.eth1.ra ) by /bin/rm[dhcpcd-run-hook:5152] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5147] uid/euid:0/0 gid/egid:0/0 03:30:22 g0n kernel: [ 442.859615] grsec: (root:U:/bin/chmod) exec of /bin/chmod (chmod 644 /etc/resolv.conf ) by /bin/chmod[dhcpcd-run-hook:5153] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5147] uid/euid:0/0 gid/egid:0/0 03:30:22 g0n kernel: [ 442.861199] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.eth1.ra ) by /bin/rm[dhcpcd-run-hook:5154] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5147] uid/euid:0/0 gid/egid:0/0 03:30:22 g0n dhcpcd[2923]: eth1: deleting address fe80::30b7:84a9:5f50:6486 03:30:22 g0n dhcpcd[2923]: eth1: deleting default route via 192.168.1.1 03:30:22 g0n dhcpcd[2923]: eth1: deleting route to 192.168.1.0/24 03:30:22 g0n kernel: [ 442.889646] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:5156] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:30:22 g0n kernel: [ 442.905676] grsec: (root:U:/) exec of /usr/bin/cmp (cmp -s /etc/resolv.conf /run/dhcpcd/resolv.conf.eth1.dhcp ) by /usr/bin/cmp[dhcpcd-run-hook:5158] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5156] uid/euid:0/0 gid/egid:0/0 03:30:22 g0n kernel: [ 442.907581] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.eth1.dhcp ) by /bin/rm[dhcpcd-run-hook:5159] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5156] uid/euid:0/0 gid/egid:0/0 03:30:22 g0n kernel: [ 442.912987] grsec: (root:U:/bin/rm) exec of /bin/rm (rm -f /run/dhcpcd/resolv.conf.eth1.dhcp ) by /bin/rm[dhcpcd-run-hook:5160] uid/euid:0/0 gid/egid:0/0, parent /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd-run-hook:5156] uid/euid:0/0 gid/egid:0/0 03:30:22 g0n dhcpcd[2923]: vnet0: soliciting a DHCP lease 03:30:22 g0n dhcpcd[2923]: vnet0: soliciting an IPv6 router
Frame 32: 413 bytes on wire (3304 bits), 413 bytes captured (3304 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:30:22.201993885 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199422.201993885 seconds
[Time delta from previous captured frame: 12.902185739 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 97.469649504 seconds]
Frame Number: 32
Frame Length: 413 bytes (3304 bits)
Capture Length: 413 bytes (3304 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: fe:54:00:98:2f:06 (fe:54:00:98:2f:06)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 397
Identification: 0x9608 (38408)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0xe358 [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 377
Checksum: 0x5376 [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x4198f255
Seconds elapsed: 0
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: fe:54:00:98:2f:06 (fe:54:00:98:2f:06)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00982f06
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
03:30:23 g0n kernel: [ 443.881944] sky2 0000:06:00.0 eth1: hung mac 0:74 fifo 74 (48:122) 03:30:23 g0n kernel: [ 443.881958] sky2 0000:06:00.0 eth1: receiver hang detected 03:30:23 g0n kernel: [ 444.329973] virbr0: port 2(vnet0) entered learning state
33 100.767416493 0.0.0.0 → 255.255.255.255 DHCP 413 DHCP Discover - Transaction ID 0x4198f255
03:30:25 g0n kernel: [ 446.377988] virbr0: port 2(vnet0) entered forwarding state 03:30:25 g0n kernel: [ 446.378026] virbr0: topology change detected, propagating 03:30:25 g0n dhcpcd[2923]: virbr0: carrier acquired 03:30:25 g0n kernel: [ 446.379529] grsec: (root:U:/lib64/dhcpcd/dhcpcd-run-hooks) exec of /lib64/dhcpcd/dhcpcd-run-hooks (/lib/dhcpcd/dhcpcd-run-hooks ) by /lib64/dhcpcd/dhcpcd-run-hooks[dhcpcd:5162] uid/euid:0/0 gid/egid:0/0, parent /sbin/dhcpcd[dhcpcd:2923] uid/euid:0/0 gid/egid:0/0 03:30:25 g0n dhcpcd[2923]: virbr0: IAID 00:ea:ee:e9 03:30:25 g0n dhcpcd[2923]: virbr0: IAID conflicts with one assigned to virbr0-nic 03:30:25 g0n dhcpcd[2923]: virbr0: soliciting a DHCP lease
Frame 33: 413 bytes on wire (3304 bits), 413 bytes captured (3304 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:30:25.499760874 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199425.499760874 seconds
[Time delta from previous captured frame: 3.297766989 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 100.767416493 seconds]
Frame Number: 33
Frame Length: 413 bytes (3304 bits)
Capture Length: 413 bytes (3304 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: fe:54:00:98:2f:06 (fe:54:00:98:2f:06)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 397
Identification: 0xa223 (41507)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0xd73d [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 377
Checksum: 0x5373 [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x4198f255
Seconds elapsed: 3
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: fe:54:00:98:2f:06 (fe:54:00:98:2f:06)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00982f06
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
34 101.253671955 0.0.0.0 → 255.255.255.255 DHCP 413 DHCP Discover - Transaction ID 0x2eefbca3
Frame 34: 413 bytes on wire (3304 bits), 413 bytes captured (3304 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:30:25.986016336 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199425.986016336 seconds
[Time delta from previous captured frame: 0.486255462 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 101.253671955 seconds]
Frame Number: 34
Frame Length: 413 bytes (3304 bits)
Capture Length: 413 bytes (3304 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 397
Identification: 0x35c9 (13769)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x4398 [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 377
Checksum: 0xc766 [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x2eefbca3
Seconds elapsed: 0
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00eaeee9
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
35 101.253702108 0.0.0.0 → 255.255.255.255 DHCP 413 DHCP Discover - Transaction ID 0x2eefbca3
Frame 35: 413 bytes on wire (3304 bits), 413 bytes captured (3304 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:30:25.986046489 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199425.986046489 seconds
[Time delta from previous captured frame: 0.000030153 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 101.253702108 seconds]
Frame Number: 35
Frame Length: 413 bytes (3304 bits)
Capture Length: 413 bytes (3304 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 397
Identification: 0x35c9 (13769)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x4398 [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 377
Checksum: 0xc766 [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x2eefbca3
Seconds elapsed: 0
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00eaeee9
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
36 104.977557714 0.0.0.0 → 255.255.255.255 DHCP 413 DHCP Discover - Transaction ID 0x2eefbca3
Frame 36: 413 bytes on wire (3304 bits), 413 bytes captured (3304 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:30:29.709902095 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199429.709902095 seconds
[Time delta from previous captured frame: 3.723855606 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 104.977557714 seconds]
Frame Number: 36
Frame Length: 413 bytes (3304 bits)
Capture Length: 413 bytes (3304 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 397
Identification: 0x18e7 (6375)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x607a [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 377
Checksum: 0xc763 [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x2eefbca3
Seconds elapsed: 3
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00eaeee9
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255
37 104.977589169 0.0.0.0 → 255.255.255.255 DHCP 413 DHCP Discover - Transaction ID 0x2eefbca3
Frame 37: 413 bytes on wire (3304 bits), 413 bytes captured (3304 bits) on interface 0
Interface id: 0 (any)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Mar 11, 2017 03:30:29.709933550 CET
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1489199429.709933550 seconds
[Time delta from previous captured frame: 0.000031455 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 104.977589169 seconds]
Frame Number: 37
Frame Length: 413 bytes (3304 bits)
Capture Length: 413 bytes (3304 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:udp:bootp]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Protocol: IPv4 (0x0800)
Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 397
Identification: 0x18e7 (6375)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x607a [validation disabled]
[Header checksum status: Unverified]
Source: 0.0.0.0
Destination: 255.255.255.255
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Source Port: bootpc (68)
Destination Port: bootps (67)
Length: 377
Checksum: 0xc763 [unverified]
[Checksum Status: Unverified]
[Stream index: 2]
Bootstrap Protocol (Discover)
Message type: Boot Request (1)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x2eefbca3
Seconds elapsed: 3
Bootp flags: 0x0000 (Unicast)
0... .... .... .... = Broadcast flag: Unicast
.000 0000 0000 0000 = Reserved flags: 0x0000
Client IP address: 0.0.0.0
Your (client) IP address: 0.0.0.0
Next server IP address: 0.0.0.0
Relay agent IP address: 0.0.0.0
Client MAC address: RealtekU_ea:ee:e9 (52:54:00:ea:ee:e9)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Discover)
Length: 1
DHCP: Discover (1)
Option: (61) Client identifier
Length: 19
IAID: 00eaeee9
DUID Type: link-layer address plus time (1)
Hardware type: Ethernet (1)
Time: 526570590
Link layer address: bc:5f:f4:c5:60:6c
Option: (80) Rapid commit
Length: 0
Option: (116) DHCP Auto-Configuration
Length: 1
DHCP Auto-Configuration: AutoConfigure (1)
Option: (57) Maximum DHCP Message Size
Length: 2
Maximum DHCP Message Size: 1472
Option: (60) Vendor class identifier
Length: 68
Vendor class identifier: dhcpcd-6.11.5:Linux-4.9.13-hardened-r1-170310_23:x86_64:AuthenticAMD
Option: (12) Host Name
Length: 3
Host Name: g0n
Option: (145) Unassigned
Length: 1
Value: 01
Option: (55) Parameter Request List
Length: 15
Parameter Request List Item: (1) Subnet Mask
Parameter Request List Item: (121) Classless Static Route
Parameter Request List Item: (33) Static Route
Parameter Request List Item: (3) Router
Parameter Request List Item: (6) Domain Name Server
Parameter Request List Item: (12) Host Name
Parameter Request List Item: (15) Domain Name
Parameter Request List Item: (26) Interface MTU
Parameter Request List Item: (28) Broadcast Address
Parameter Request List Item: (42) Network Time Protocol Servers
Parameter Request List Item: (51) IP Address Lease Time
Parameter Request List Item: (54) DHCP Server Identifier
Parameter Request List Item: (58) Renewal Time Value
Parameter Request List Item: (59) Rebinding Time Value
Parameter Request List Item: (119) Domain Search
Option: (255) End
Option End: 255


