|
Sorry!I forgot set ip_forward at the front post.
the result is :
On the director:
[root@alpha2 /root]# tcpdump -ln host 192.168.193.158
Kernel filter, protocol ALL, datagram packet socket
tcpdump: listening on all devices
18:25:24.953802 eth0 < 192.168.193.158.3701 > 192.168.193.224.www: S 851837266:8
51837266(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
18:25:24.953802 eth1 > 192.168.193.224 > 192.168.193.158: icmp: redirect 192.168
194.111 to host 192.168.194.111 [tos 0xc0]
18:25:24.953802 eth0 > 192.168.193.158.3701 > 192.168.194.111.www: S 851837266:8
51837266(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
18:25:27.890325 eth0 < 192.168.193.158.3701 > 192.168.193.224.www: S 851837266:8
51837266(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
18:25:27.890325 eth1 > 192.168.193.224 > 192.168.193.158: icmp: redirect 192.168
194.111 to host 192.168.194.111 [tos 0xc0]
18:25:27.890325 eth0 > 192.168.193.158.3701 > 192.168.194.111.www: S 851837266:8
51837266(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
18:25:29.954778 eth1 > arp who-has 192.168.193.158 tell 192.168.193.223 (0:50:4:
c8:c6:4d)
18:25:29.954778 eth1 < arp reply 192.168.193.158 is-at 0:d0:9:11:75:f6 (0:50:4:c
8:c6:4d)
18:25:33.901067 eth0 < 192.168.193.158.3701 > 192.168.193.224.www: S 851837266:8
51837266(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
18:25:33.901067 eth1 > 192.168.193.224 > 192.168.193.158: icmp: redirect 192.168
194.111 to host 192.168.194.111 [tos 0xc0]
18:25:33.901067 eth0 > 192.168.193.158.3701 > 192.168.194.111.www: S 851837266:8
51837266(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
on the real server:
[root@alpha /root]# tcpdump -ln host 192.168.193.158
Kernel filter, protocol ALL, datagram packet socket
tcpdump: listening on all devices
06:10:38.195313 eth0 < 192.168.193.158.3701 > 192.168.194.111.www: S 851837266:)
06:10:38.195313 eth0 > 192.168.194.111.www > 192.168.193.158.3701: R 0:0(0) ack0
06:10:41.128907 eth0 < 192.168.193.158.3701 > 192.168.194.111.www: S 851837266:)
06:10:41.128907 eth0 > 192.168.194.111.www > 192.168.193.158.3701: R 0:0(0) ack0
06:10:43.195313 eth0 > arp who-has 192.168.193.158 tell 192.168.194.111 (0:50:d)
06:10:43.195313 eth0 < arp reply 192.168.193.158 is-at 0:d0:9:11:75:f6 (0:50:da)
06:10:47.135742 eth0 < 192.168.193.158.3701 > 192.168.194.111.www: S 851837266:)
06:10:47.135742 eth0 > 192.168.194.111.www > 192.168.193.158.3701: R 0:0(0) ack0
the real server reset the request,but on the real server,httpd is live.
|
