[Sysadmins] Ковчег 5.0 - странно работает NAT через pppoe

[Владимир Саломатин]

> Что-то насчёт хопов и tcpdump на этом pppoe...
> 

tcpdump выводит что-то такое. Я понимаю, что пакеты ходят, но понять чем это може помочь мне пока не могу. 
Это я на ya.ru пытаюсь подключиться 
192.168.1.2  локальная машина
91.144.134.30 внешний IP сервера
Может кто-что в этом уидет?

 root на comp-Dual-Core--ec75a3 squid]# tcpdump -n -i ppp1 -l | tee tmp.log
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ppp1, link-type LINUX_SLL (Linux cooked), capture size 96 bytes
00:17:34.563830 IP 91.144.134.30.54754 > 91.144.134.3.domain: 25478+ [1au] A? ya.ru. (34)
00:17:34.564759 IP 91.144.134.3.domain > 91.144.134.30.54754: 25478 3/2/1 A 77.88.21.8, A[|domain]
00:17:34.565833 IP 91.144.134.30.41113 > 93.158.134.8.http: S 3177273342:3177273342(0) win 5240 <mss 
40,nop,nop,sackOK,nop,wscale 7>
00:17:34.605322 IP 93.158.134.8.http > 192.168.1.2.41113: S 1970114950:1970114950(0) ack 3177273343 win 8192 <mss 
216,nop,wscale 3,sackOK,eol>
00:17:34.605511 IP 91.144.134.30.41113 > 93.158.134.8.http: . ack 1970114951 win 41
00:17:34.605678 IP 91.144.134.30.41113 > 93.158.134.8.http: . 0:48(48) ack 1 win 41
00:17:34.605711 IP 91.144.134.30.41113 > 93.158.134.8.http: . 48:96(48) ack 1 win 41
00:17:34.644471 IP 93.158.134.8.http > 192.168.1.2.41113: . ack 97 win 1014
00:17:34.644611 IP 192.168.1.2.41113 > 93.158.134.8.http: R 3177273439:3177273439(0) win 0
00:17:37.604735 IP 91.144.134.30.41113 > 93.158.134.8.http: . 0:48(48) ack 1 win 41
00:17:37.643433 IP 93.158.134.8.http > 192.168.1.2.41113: . ack 97 win 1014
00:17:37.643567 IP 192.168.1.2.41113 > 93.158.134.8.http: R 3177273439:3177273439(0) win 0
00:17:43.606482 IP 91.144.134.30.41113 > 93.158.134.8.http: . 0:48(48) ack 1 win 41
00:17:43.645402 IP 93.158.134.8.http > 192.168.1.2.41113: . ack 97 win 1014
00:17:43.645548 IP 192.168.1.2.41113 > 93.158.134.8.http: R 3177273439:3177273439(0) win 0
00:17:55.608012 IP 91.144.134.30.41113 > 93.158.134.8.http: . 0:48(48) ack 1 win 41
00:17:55.647201 IP 93.158.134.8.http > 192.168.1.2.41113: . ack 97 win 1014
00:17:55.647335 IP 192.168.1.2.41113 > 93.158.134.8.http: R 3177273439:3177273439(0) win 0
00:18:04.164445 IP 91.144.134.30.35550 > 83.229.210.18.ntp: NTPv4, Client, length 48
00:18:04.201999 IP 83.229.210.18.ntp > 91.144.134.30.35550: NTPv4, Server, length 48
00:18:19.603062 IP 91.144.134.30.41113 > 93.158.134.8.http: . 0:48(48) ack 1 win 41
00:18:19.642490 IP 93.158.134.8.http > 192.168.1.2.41113: . ack 97 win 1014
00:18:19.642616 IP 192.168.1.2.41113 > 93.158.134.8.http: R 3177273439:3177273439(0) win 0
00:18:21.174598 IP 91.144.134.30 > 93.186.231.219: ICMP echo request, id 29218, seq 18945, length 29
00:18:21.227923 IP 93.186.231.219 > 91.144.134.30: ICMP echo reply, id 29218, seq 18945, length 29
00:18:23.020912 IP 91.144.134.30 > 217.106.234.202: ICMP echo request, id 29218, seq 19201, length 32
00:18:23.061512 IP 217.106.234.202 > 91.144.134.30: ICMP echo reply, id 29218, seq 19201, length 32
00:18:31.243438 IP 91.144.134.30 > 74.201.144.26: ICMP echo request, id 29218, seq 19457, length 41
00:18:31.413034 IP 74.201.144.26 > 91.144.134.30: ICMP echo reply, id 29218, seq 19457, length 41