[Sysadmins] ftp пропрос во внутр. сеть

[Igo]

непойуму зачем ftp делает 192.168.2.7.3947 > ЛЕЗУ_С_IP.64234

[root на postmaster sysconfig]# tcpdump -i ppp0 host ЛЕЗУ_С_IP
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ppp0, link-type LINUX_SLL (Linux cooked), capture size 96 
bytes
14:02:39.263733 IP ЛЕЗУ_С_IP.59380 > EXT_IP.ftp: P 
714738736:714738765(29) ack 1460789004 win 64593
14:02:39.265094 IP EXT_IP.ftp > ЛЕЗУ_С_IP.59380: P 1:30(29) ack 29 win 
65327
14:02:39.299351 IP ЛЕЗУ_С_IP.59380 > EXT_IP.ftp: P 29:35(6) ack 30 win 
64564
14:02:39.420286 IP EXT_IP.ftp > ЛЕЗУ_С_IP.59380: . ack 35 win 65321
14:03:00.235215 IP EXT_IP.ftp > ЛЕЗУ_С_IP.59380: P 30:102(72) ack 35 win 
65321
14:03:00.365407 IP ЛЕЗУ_С_IP.59380 > EXT_IP.ftp: . ack 102 win 64492

[root на postmaster sysconfig]# tcpdump -i eth2 host ЛЕЗУ_С_IP
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth2, link-type EN10MB (Ethernet), capture size 96 bytes
14:04:49.376160 IP ЛЕЗУ_С_IP.59380 > 192.168.2.7.ftp: P 
714738771:714738800(29) ack 1460789105 win 64492
14:04:49.377180 IP 192.168.2.7.ftp > ЛЕЗУ_С_IP.59380: P 1:30(29) ack 29 
win 65292
14:04:49.411025 IP ЛЕЗУ_С_IP.59380 > 192.168.2.7.ftp: P 29:35(6) ack 30 
win 64463
14:04:49.411525 IP 192.168.2.7.3947 > ЛЕЗУ_С_IP.64234: S 
622628594:622628594(0) win 65535 <mss 1460,nop,nop,sackOK>
14:04:49.560325 IP 192.168.2.7.ftp > ЛЕЗУ_С_IP.59380: . ack 35 win 65286
14:04:52.376478 IP 192.168.2.7.3947 > ЛЕЗУ_С_IP.64234: S 
622628594:622628594(0) win 65535 <mss 1460,nop,nop,sackOK>
14:04:58.310420 IP 192.168.2.7.3947 > ЛЕЗУ_С_IP.64234: S 
622628594:622628594(0) win 65535 <mss 1460,nop,nop,sackOK>
14:05:10.380143 IP 192.168.2.7.ftp > ЛЕЗУ_С_IP.59380: P 30:102(72) ack 
35 win 65286
14:05:10.515822 IP ЛЕЗУ_С_IP.59380 > 192.168.2.7.ftp: . ack 102 win 64391