Re: trixie: Probleme nach suspend

Am 05.02.26 um 07:05 schrieb Marco Moock:
> On 04.02.2026 15:00 Jürgen Bausa wrote:
> 
>>>
>>> Mache mal einen Paketmitschnitt und öffne eine Seite, die nicht
>>> geht.
>>
>> wie mache ich das? Einfach den Output von tcpdump umleiten? Dann habe
>> ich ja da auch alles drin, was sonst noch so im Hintergrund läuft
>> (nfs und ähnliches). Oder muss ich da spezielle Optionen angeben?
> 
> tcpdump hat eine Option, die Pakete zu filtern, z.B. mit
> 'not net 2001:db::/32'
> so kann man z.B. den lokalen Verkehr ausschließen, musst du an die
> Gegebenheiten anpassen.
> 
> Mit -w <Datei> kann man den Dump speichern. Das ist wichtig, weil die
> Standardausgabe lange nicht alles beinhaltet, was interessant sein
> könnte.
> 

So, habe es jetzt mit folgendem Kommando gemacht

# tcpdump -i eth0 not host 192.168.1.16 and host 192.168.0.2

damit sehe ich nur, was an meinem Rechner (lisa, 192.168.0.2) aus- und 
eingeht und filtere alles raus, was zum nfs Server geht (192.168.0.16). 
Die Option -w habe ich weg gelassen, weil die binäre Pakete speichert, 
das würde uns hier wohl nicht viel helfen. Oder meintest du eine andere 
Option?

Passt der Aufruf so?

Hier der Output für den schlecht-Zustand:

root@lisa:~# tcpdump -i eth0 not host 192.168.1.16 and host 192.168.0.2
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), snapshot length 262144 bytes
22:02:41.329539 IP lisa.local.39127 > router.local.domain: 65282+ A? 
clientservices.googleapis.com. (47)
22:02:41.329551 IP lisa.local.39127 > router.local.domain: 13056+ AAAA? 
clientservices.googleapis.com. (47)
22:02:41.337523 IP router.local.domain > lisa.local.39127: 13056 1/0/0 
AAAA 2a00:1450:4001:802::2003 (75)
22:02:41.337874 IP router.local.domain > lisa.local.39127: 65282 1/0/0 A 
142.251.140.163 (63)
22:02:41.401955 IP lisa.local.39715 > router.local.domain: 57364+ A? 
www.google.de. (31)
22:02:41.401976 IP lisa.local.39715 > router.local.domain: 14345+ AAAA? 
www.google.de. (31)
22:02:41.403278 IP lisa.local.48580 > router.local.domain: 47652+ A? 
www.google.com. (32)
22:02:41.403286 IP lisa.local.48580 > router.local.domain: 38968+ AAAA? 
www.google.com. (32)
22:02:41.404692 IP router.local.domain > lisa.local.48580: 47652 1/0/0 A 
142.251.141.100 (48)
22:02:41.405015 IP router.local.domain > lisa.local.48580: 38968 1/0/0 
AAAA 2a00:1450:4001:804::2004 (60)
22:02:41.411035 IP router.local.domain > lisa.local.39715: 57364 1/0/0 A 
216.58.206.35 (47)
22:02:41.411357 IP router.local.domain > lisa.local.39715: 14345 1/0/0 
AAAA 2a00:1450:4001:80a::2003 (59)
22:02:41.492592 IP lisa.local.57050 > router.local.domain: 59859+ A? 
www.google.de. (31)
22:02:41.492603 IP lisa.local.57050 > router.local.domain: 28881+ AAAA? 
www.google.de. (31)
22:02:41.493150 IP router.local.domain > lisa.local.57050: 59859 1/0/0 A 
216.58.206.35 (47)
22:02:41.493380 IP router.local.domain > lisa.local.57050: 28881 1/0/0 
AAAA 2a00:1450:4001:80a::2003 (59)
22:02:41.904745 IP lisa.local.59288 > router.local.domain: 47439+ A? 
accounts.google.com. (37)
22:02:41.904757 IP lisa.local.59288 > router.local.domain: 35656+ AAAA? 
accounts.google.com. (37)
22:02:41.911435 IP router.local.domain > lisa.local.59288: 47439 1/0/0 A 
142.251.127.84 (53)
22:02:41.912910 IP router.local.domain > lisa.local.59288: 35656 1/0/0 
AAAA 2a00:1450:4001:c21::54 (65)
22:02:44.951457 ARP, Request who-has lisa.local tell router.local, length 46
22:02:44.951483 ARP, Reply lisa.local is-at 80:ee:73:b8:00:19 (oui 
Unknown), length 28
22:02:46.192333 IP lisa.local.36664 > router.local.domain: 24406+ A? 
update.googleapis.com. (39)
22:02:46.192343 IP lisa.local.36664 > router.local.domain: 14164+ AAAA? 
update.googleapis.com. (39)
22:02:46.198860 IP router.local.domain > lisa.local.36664: 24406 1/0/0 A 
172.217.16.195 (55)
22:02:46.199927 IP router.local.domain > lisa.local.36664: 14164 1/0/0 
AAAA 2a00:1450:4001:814::2003 (67)
22:02:46.314358 IP lisa.local.44005 > router.local.domain: 19298+ A? 
mtalk.google.com. (34)
22:02:46.314367 IP lisa.local.44005 > router.local.domain: 40033+ AAAA? 
mtalk.google.com. (34)
22:02:46.320797 IP lisa.local.38416 > router.local.domain: 20528+ A? 
android.clients.google.com. (44)
22:02:46.320808 IP lisa.local.38416 > router.local.domain: 17213+ AAAA? 
android.clients.google.com. (44)
22:02:46.323590 IP router.local.domain > lisa.local.44005: 19298 2/0/0 
CNAME mobile-gtalk.l.google.com., A 142.251.127.188 (79)
22:02:46.323984 IP router.local.domain > lisa.local.44005: 40033 2/0/0 
CNAME mobile-gtalk.l.google.com., AAAA 2a00:1450:4001:c21::bc (91)
22:02:46.328060 IP router.local.domain > lisa.local.38416: 20528 17/0/0 
CNAME android.l.google.com., A 142.250.201.78, A 142.251.208.14, A 
142.251.141.78, A 142.251.141.110, A 216.58.206.46, A 142.251.208.174, A 
142.250.186.78, A 142.250.187.238, A 172.217.16.206, A 172.217.20.142, A 
142.251.141.142, A 142.250.185.142, A 142.250.185.174, A 172.217.16.174, 
A 216.58.206.78, A 142.250.201.174 (324)
22:02:46.329171 IP router.local.domain > lisa.local.38416: 17213 1/1/0 
CNAME android.l.google.com. (118)
22:02:46.329955 IP lisa.local.51374 > tzfraa-aq-in-f14.1e100.net.https: 
UDP, length 1250
22:02:46.329978 IP lisa.local.51374 > tzfraa-aq-in-f14.1e100.net.https: 
UDP, length 1250
22:02:46.330087 IP lisa.local.43110 > tzfraa-aq-in-f14.1e100.net.https: 
Flags [S], seq 13331345, win 64240, options [mss 1460,sackOK,TS val 
3010875098 ecr 0,nop,wscale 7], length 0
22:02:46.340297 IP tzfraa-aq-in-f14.1e100.net.https > lisa.local.51374: 
UDP, length 40
22:02:46.340506 IP tzfraa-aq-in-f14.1e100.net.https > lisa.local.43110: 
Flags [S.], seq 3081338575, ack 13331346, win 65535, options [mss 
1412,sackOK,TS val 6791298 ecr 3010875098,nop,wscale 8], length 0
22:02:46.340529 IP lisa.local.43110 > tzfraa-aq-in-f14.1e100.net.https: 
Flags [.], ack 1, win 502, options [nop,nop,TS val 3010875108 ecr 
6791298], length 0
22:02:46.340906 IP lisa.local.43110 > tzfraa-aq-in-f14.1e100.net.https: 
Flags [.], seq 1:1401, ack 1, win 502, options [nop,nop,TS val 
3010875108 ecr 6791298], length 1400
22:02:46.340908 IP lisa.local.43110 > tzfraa-aq-in-f14.1e100.net.https: 
Flags [P.], seq 1401:1769, ack 1, win 502, options [nop,nop,TS val 
3010875108 ecr 6791298], length 368
22:02:46.342260 IP tzfraa-aq-in-f14.1e100.net.https > lisa.local.51374: 
UDP, length 1250
22:02:46.342646 IP tzfraa-aq-in-f14.1e100.net.https > lisa.local.51374: 
UDP, length 1250
22:02:46.342735 IP tzfraa-aq-in-f14.1e100.net.https > lisa.local.51374: 
UDP, length 1250
22:02:46.343004 IP lisa.local.51374 > tzfraa-aq-in-f14.1e100.net.https: 
UDP, length 1250
22:02:46.349597 IP tzfraa-aq-in-f14.1e100.net.https > lisa.local.51374: 
UDP, length 1250
22:02:46.349650 IP tzfraa-aq-in-f14.1e100.net.https > lisa.local.51374: 
UDP, length 1134
22:02:46.349799 IP lisa.local.51374 > tzfraa-aq-in-f14.1e100.net.https: 
UDP, length 39
22:02:46.350933 IP lisa.local.51374 > tzfraa-aq-in-f14.1e100.net.https: 
UDP, length 37
22:02:46.350954 IP tzfraa-aq-in-f14.1e100.net.https > lisa.local.43110: 
Flags [.], ack 1401, win 1045, options [nop,nop,TS val 6791308 ecr 
3010875108], length 0
22:02:46.351109 IP tzfraa-aq-in-f14.1e100.net.https > lisa.local.43110: 
Flags [.], ack 1769, win 1044, options [nop,nop,TS val 6791308 ecr 
3010875108], length 0
22:02:46.359077 IP tzfraa-aq-in-f14.1e100.net.https > lisa.local.43110: 
Flags [.], seq 1:1401, ack 1769, win 1044, options [nop,nop,TS val 
6791316 ecr 3010875108], length 1400
22:02:46.359096 IP lisa.local.43110 > tzfraa-aq-in-f14.1e100.net.https: 
Flags [.], ack 1401, win 525, options [nop,nop,TS val 3010875127 ecr 
6791316], length 0
22:02:46.359350 IP tzfraa-aq-in-f14.1e100.net.https > lisa.local.43110: 
Flags [P.], seq 1401:2801, ack 1769, win 1044, options [nop,nop,TS val 
6791316 ecr 3010875108], length 1400
22:02:46.359350 IP tzfraa-aq-in-f14.1e100.net.https > lisa.local.43110: 
Flags [.], seq 2801:4201, ack 1769, win 1044, options [nop,nop,TS val 
6791316 ecr 3010875108], length 1400
22:02:46.359365 IP lisa.local.43110 > tzfraa-aq-in-f14.1e100.net.https: 
Flags [.], ack 2801, win 548, options [nop,nop,TS val 3010875127 ecr 
6791316], length 0
22:02:46.359373 IP lisa.local.43110 > tzfraa-aq-in-f14.1e100.net.https: 
Flags [.], ack 4201, win 570, options [nop,nop,TS val 3010875127 ecr 
6791316], length 0
22:02:46.360266 IP tzfraa-aq-in-f14.1e100.net.https > lisa.local.43110: 
Flags [P.], seq 4201:5601, ack 1769, win 1044, options [nop,nop,TS val 
6791316 ecr 3010875108], length 1400
22:02:46.360277 IP lisa.local.43110 > tzfraa-aq-in-f14.1e100.net.https: 
Flags [.], ack 5601, win 593, options [nop,nop,TS val 3010875128 ecr 
6791316], length 0
22:02:46.360323 IP tzfraa-aq-in-f14.1e100.net.https > lisa.local.43110: 
Flags [P.], seq 5601:6589, ack 1769, win 1044, options [nop,nop,TS val 
6791316 ecr 3010875108], length 988
22:02:46.360331 IP lisa.local.43110 > tzfraa-aq-in-f14.1e100.net.https: 
Flags [.], ack 6589, win 615, options [nop,nop,TS val 3010875128 ecr 
6791316], length 0
22:02:46.360962 IP tzfraa-aq-in-f14.1e100.net.https > lisa.local.51374: 
UDP, length 41
22:02:46.380671 IP lisa.local.41882 > router.local.domain: 17521+ PTR? 
78.201.250.142.in-addr.arpa. (45)
22:02:46.387648 IP router.local.domain > lisa.local.41882: 17521 1/0/0 
PTR tzfraa-aq-in-f14.1e100.net. (85)
22:02:50.361627 IP lisa.local.51374 > tzfraa-aq-in-f14.1e100.net.https: 
UDP, length 167
22:02:50.984597 IP lisa.local.49667 > router.local.domain: 23216+ A? 
optimizationguide-pa.googleapis.com. (53)
22:02:50.984619 IP lisa.local.49667 > router.local.domain: 32699+ AAAA? 
optimizationguide-pa.googleapis.com. (53)
22:02:50.991861 IP router.local.domain > lisa.local.49667: 23216 4/0/0 A 
216.239.36.223, A 216.239.32.223, A 216.239.38.223, A 216.239.34.223 (117)
22:02:50.993301 IP router.local.domain > lisa.local.49667: 32699 4/0/0 
AAAA 2001:4860:4802:32::223, AAAA 2001:4860:4802:36::223, AAAA 
2001:4860:4802:38::223, AAAA 2001:4860:4802:34::223 (165)
22:02:56.359831 IP tzfraa-aq-in-f14.1e100.net.https > lisa.local.43110: 
Flags [F.], seq 6589, ack 1769, win 1044, options [nop,nop,TS val 
6801317 ecr 3010875128], length 0
22:02:56.403976 IP lisa.local.43110 > tzfraa-aq-in-f14.1e100.net.https: 
Flags [.], ack 6590, win 615, options [nop,nop,TS val 3010885172 ecr 
6801317], length 0
^C
72 packets captured
72 packets received by filter
0 packets dropped by kernel
root@lisa:~#