Contenu | Rechercher | Menus

Annonce

Si vous avez des soucis pour rester connecté, déconnectez-vous puis reconnectez-vous depuis ce lien en cochant la case
Me connecter automatiquement lors de mes prochaines visites.

À propos de l'équipe du forum.

#26 Le 29/08/2015, à 13:51

Compte anonymisé

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

Page d'accueil : about:blank (des fois, je lui demande de se reconnecter sur les derniers onglets ouverts) et pas de vignettes.

#27 Le 29/08/2015, à 13:59

Coeur Noir

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

nam1962 a écrit :

@ Coeur Noir, cela faisait longtemps que je n'avais utilisé Qwant.
Premier résultat bloqué par ublock !!

J'utilise aussi µblock - sur tes bons conseils - avec Qwant jamais eu à me plaindre pour l'instant… Par contre µblock est parfois trop "agressif" et me semble pour l'instant moins "facile" à manœuvrer que d'autres bloqueurs.

Reste à savoir si la fondation Mozilla utilise des infrastructures d'amazon - ce qui semblerait étonnant mais pourquoi pas ? Voir ceci https://www.mozilla.org/en-US/privacy/firefox/# ou là https://support.mozilla.org/en-US/kb/ho … onnections

https://en.wikipedia.org/wiki/Amazon_S3#Notable_users → ça date un peu, vu à partir de ça → http://forums.mozillazine.org/viewtopic … 8&t=657318

Dernière modification par Coeur Noir (Le 29/08/2015, à 14:21)


DébuterDocBien rédigerRetour commandeInsérer image | illustrations & captures d'écran <>

Hors ligne

#28 Le 29/08/2015, à 14:30

Compte supprimé

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

Jojo81 ?

L_d_v_c@ a écrit :

Dans les préférences :  Avancé / Mises à jour / Mettre à jour automatiquement : les moteurs de recherche.
coché / décoché
change-t-il quelque chose ?

#29 Le 29/08/2015, à 14:44

Compte anonymisé

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

Patiente un peu Ludovic cool, ma machine Ubuntu Mate 15.04 n'est pas démarrée, je suis sur une autre là. Si jamais je trouve la bonne config, je veux la copier sur tous mes firefox.
Je n'ai pas oublié ta suggestion wink mais je ne veux pas passer mon WE à reconfigurer tous les profils.

#30 Le 29/08/2015, à 15:18

Compte supprimé

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

jojo81 a écrit :


Je n'ai pas oublié ta suggestion wink

Je l'eus cru ! wink

#31 Le 29/08/2015, à 16:57

Compte anonymisé

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

L_d_v_c@ a écrit :

Dans les préférences :  Avancé / Mises à jour / Mettre à jour automatiquement : les moteurs de recherche.
coché / décoché
change-t-il quelque chose ?

Nope sad

Je viens de paramétrer selon les suggestions proposées, ça fait toujours la même chose.
Cela dit, je prendrai le fichier prefs.js constitué comme exemple.

Dernière modification par Compte anonymisé (Le 29/08/2015, à 17:01)

#32 Le 30/08/2015, à 06:24

Compte anonymisé

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

Bonjour smile

Aujourd'hui, peut-être un élément de réponse rassurant.

Je viens d'analyser le trafic avec Wireshark en résolvant les noms. Il semblerait que ça redirige vers shavar.prods.mozaws.net , un service de mozilla contre la traçage et le phishing qui serait stocké sur Amazon.

GitHub Shavar : https://github.com/mozilla-services/shavar

En espérant en apprendre un peu plus.

Cordialement.

#33 Le 30/08/2015, à 08:41

lann

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

Quelques infos ici sur le serveur

https://www.virustotal.com/en-gb/domain … formation/

Hors ligne

#34 Le 30/08/2015, à 09:21

Compte anonymisé

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

D'accord, donc shavar et amazon n'ont strictement rien à voir.

Décidément, on peut ne faire confiance à personne

#35 Le 30/08/2015, à 09:28

moko138

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

jojo81 a écrit :

Il semblerait que ça redirige vers shavar.prods.mozaws.net , un service de mozilla contre la traçage et le phishing qui serait stocké sur Amazon.

Et on gobe ça !
Autant confier la protection de ses Chardin à Arsène Lupin.

Mais bon, il y en a aussi qui croient à WOT (Web Of Trust)...


%NOINDEX%
Un utilitaire précieux : ncdu
Photo, mini-tutoriel :  À la découverte de dcraw

Hors ligne

#36 Le 30/08/2015, à 09:32

Compte anonymisé

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

Ah tiens, moko138, tu tombes bien.
Comment as-tu bloqué amazonaws ? Merci.

EDIT, tu as répondu sur l'autre sujet

moko138 a écrit :
jojo81 a écrit :
L_d_v_c@ a écrit :

moko138, bloques-tu toujours amazonaws ? ce que jojo81 a trouvé est intéressant :

J'aurais bien aimé savoir comment moko138 est parvenu à bloquer ça au cas où ma supposition est fausse. Depuis hier, je m'y casse les dents.

:~$ grep amazon /etc/hosts
127.0.0.1 amazonaws.com
127.0.0.1  rcm.amazon.com
127.0.0.1  rcm-images.amazon.com
127.0.0.1  alexa-sitestats.s3.amazonaws.com
127.0.0.1  ecommstats.s3.amazonaws.com

Tiens ! amazonaws héberge aussi alexa ; les coquins s'accoquinent.

Dernière modification par Compte anonymisé (Le 30/08/2015, à 09:34)

#37 Le 30/08/2015, à 09:39

Compte supprimé

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

jojo81 a écrit :

Ah tiens, moko138, tu tombes bien.
Comment as-tu bloqué amazonaws ? Merci.

EDIT, tu as répondu sur l'autre sujet

Moi aussi, j'avais répondu sur l'autre sujet, il ne faut pas faire comme moko138 a fait, il y a une manière plus adaptée :

moi a écrit :
jojo81 a écrit :

J'aurais bien aimé savoir comment moko138 est parvenu à bloquer ça au cas où ma supposition est fausse. Depuis hier, je m'y casse les dents.

pi@raspberrypi ~ $ ls -l /etc/host*
-rw-r--r-- 1 root root   9 août   7  2006 /etc/host.conf
-rw-r--r-- 1 root root  12 août   2 17:27 /etc/hostname
-rw-r--r-- 1 root root 178 août   2 17:27 /etc/hosts
-rw-r--r-- 1 root root 580 mai    7 00:26 /etc/hosts.allow
-rw-r--r-- 1 root root 896 août   9 20:20 /etc/hosts.deny
-rw-r--r-- 1 root root 880 mai    7 00:26 /etc/hosts.deny~

pi@raspberrypi ~ $ cat /etc/hosts.deny
# /etc/hosts.deny: list of hosts that are _not_ allowed to access the system.
#                  See the manual pages hosts_access(5) and hosts_options(5).
#
# Example:    ALL: some.host.name, .some.domain
#             ALL EXCEPT in.fingerd: other.host.name, .other.domain
#
# If you're going to protect the portmapper use the name "portmap" for the
# daemon name. Remember that you can only use the keyword "ALL" and IP
# addresses (NOT host or domain names) for the portmapper, as well as for
# rpc.mountd (the NFS mount daemon). See portmap(8) and rpc.mountd(8)
# for further information.
#
# The PARANOID wildcard matches any host whose name does not match its
# address.
#
# You may wish to enable this to ensure any programs that don't
# validate looked up hostnames still leave understandable logs. In past
# versions of Debian this has been the default.
# ALL: PARANOID

ALL: s.yimg.com

→  /etc/hosts.deny

#38 Le 30/08/2015, à 09:42

Compte anonymisé

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

Je veux bien que l'une des méthode soit plus adaptée que l'autre, mais aucune des deux méthodes ne fonctionne et la passoire amazonienne continue
Ne me dites pas que je suis assez noob pour ne pas avoir compris qu'il fallait redémarrer la machine.

#39 Le 30/08/2015, à 10:11

Compte supprimé

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

jojo81 a écrit :

Je veux bien que l'une des méthode soit plus adaptée que l'autre, mais aucune des deux méthodes ne fonctionne et la passoire amazonienne continue
Ne me dites pas que je suis assez noob pour ne pas avoir compris qu'il fallait redémarrer la machine.

Essaye ça :

sudo echo "ALL:    amazonaws.com" >> /etc/hosts.deny

C'est dimanche matin, tu n'est pas bien réveillé jojo81 wink

Dernière modification par Compte supprimé (Le 30/08/2015, à 10:13)

#40 Le 30/08/2015, à 10:14

Compte supprimé

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

(oups, j'avais oublié ALL: dans ma ligne de commandes)
c'est dimanche matin pour moi aussi tongue pas bien réveillé ! …

Dernière modification par Compte supprimé (Le 30/08/2015, à 10:14)

#41 Le 30/08/2015, à 12:18

Compte anonymisé

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

Re-merci ludo,
Je crois avoir pu bloquer cloudfront.net mais pas encore amazonaws hmm

Dernière modification par Compte anonymisé (Le 30/08/2015, à 12:18)

#42 Le 30/08/2015, à 12:19

Coeur Noir

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

~$ sudo echo "ALL:    amazonaws.com" >> /etc/hosts.deny
bash: /etc/hosts.deny: Permission non accordée

?

Alors qu'avec un sudo gedit c'est ok. Sauf que :

13:21:14.897186 IP Asgard.47739 > ec2-54-191-130-188.us-west-2.compute.amazonaws.com.https: Flags [.], ack 3501, win 320, options [nop,nop,TS val 4294918536 ecr 79894892], length 0
13:21:15.088044 IP ec2-54-191-130-188.us-west-2.compute.amazonaws.com.https > Asgard.47739: Flags [.], ack 696, win 79, options [nop,nop,TS val 79897443 ecr 4294910933], length 0
13:21:16.753213 IP Asgard.47746 > ec2-54-191-130-188.us-west-2.compute.amazonaws.com.https: Flags [.], ack 3490, win 320, options [nop,nop,TS val 4294919000 ecr 79895356], length 0
13:21:16.943930 IP ec2-54-191-130-188.us-west-2.compute.amazonaws.com.https > Asgard.47746: Flags [.], ack 1284, win 82, options [nop,nop,TS val 79897907 ecr 4294911395], length 0
13:21:17.233173 IP Asgard.33043 > ec2-54-148-98-96.us-west-2.compute.amazonaws.com.https: Flags [.], ack 13500, win 570, options [nop,nop,TS val 4294919120 ecr 1292603166], length 0
13:21:17.423675 IP ec2-54-148-98-96.us-west-2.compute.amazonaws.com.https > Asgard.33043: Flags [.], ack 8003, win 443, options [nop,nop,TS val 1292613360 ecr 4294914068], length 0
13:21:18.228005 ARP, Request who-has Asgard tell 192.168.1.254, length 46
13:21:18.228019 ARP, Reply Asgard is-at 74:d0:2b:9e:fb:40 (oui Unknown), length 28
13:21:19.409211 IP Asgard.34777 > ec2-52-10-148-1.us-west-2.compute.amazonaws.com.https: Flags [.], ack 5482, win 344, options [nop,nop,TS val 4294919664 ecr 552799033], length 0
13:21:19.599619 IP ec2-52-10-148-1.us-west-2.compute.amazonaws.com.https > Asgard.34777: Flags [.], ack 1912, win 86, options [nop,nop,TS val 552801584 ecr 4294912063], length 0
13:21:20.561185 IP Asgard.59309 > 194.187.168.99.https: Flags [.], ack 2006, win 266, options [nop,nop,TS val 4294919952 ecr 1744497703], length 0
13:21:20.600344 IP 194.187.168.99.https > Asgard.59309: Flags [.], ack 888, win 65, options [nop,nop,TS val 1744500214 ecr 4294909911], length 0
13:21:20.849157 IP Asgard.41525 > 68.232.34.191.https: Flags [.], ack 122381, win 1774, length 0
13:21:20.886769 IP 68.232.34.191.https > Asgard.41525: Flags [.], ack 695, win 33, length 0
13:21:21.009169 IP Asgard.59306 > 194.187.168.99.https: Flags [.], ack 35770, win 804, options [nop,nop,TS val 4294920064 ecr 1744497815], length 0
13:21:21.050886 IP 194.187.168.99.https > Asgard.59306: Flags [.], ack 1268, win 70, options [nop,nop,TS val 1744500326 ecr 4294910028], length 0
13:21:21.073171 IP Asgard.59308 > 194.187.168.99.https: Flags [.], ack 20120, win 576, options [nop,nop,TS val 4294920080 ecr 1744497831], length 0
13:21:21.105159 IP Asgard.50215 > 194.187.168.106.https: Flags [.], ack 11256, win 423, options [nop,nop,TS val 4294920088 ecr 1744497839], length 0
13:21:21.112262 IP 194.187.168.99.https > Asgard.59308: Flags [.], ack 1312, win 70, options [nop,nop,TS val 1744500342 ecr 4294910051], length 0
13:21:21.144457 IP 194.187.168.106.https > Asgard.50215: Flags [.], ack 790, win 65, options [nop,nop,TS val 1744500350 ecr 4294910051], length 0
13:21:21.297215 IP Asgard.57770 > ec2-52-26-119-85.us-west-2.compute.amazonaws.com.https: Flags [.], ack 3375, win 320, options [nop,nop,TS val 4294920136 ecr 127699429], length 0
13:21:21.297229 IP Asgard.33627 > 194.187.168.101.https: Flags [.], ack 15924, win 486, options [nop,nop,TS val 4294920136 ecr 1745103320], length 0
13:21:21.297233 IP Asgard.33628 > 194.187.168.101.https: Flags [.], ack 16062, win 486, options [nop,nop,TS val 4294920136 ecr 1745103320], length 0
13:21:21.329184 IP Asgard.33629 > 194.187.168.101.https: Flags [.], ack 22896, win 599, options [nop,nop,TS val 4294920144 ecr 1745103328], length 0
13:21:21.329197 IP Asgard.33630 > 194.187.168.101.https: Flags [.], ack 19195, win 554, options [nop,nop,TS val 4294920144 ecr 1745103328], length 0
13:21:21.329201 IP Asgard.33624 > 194.187.168.101.https: Flags [.], ack 57525, win 1149, options [nop,nop,TS val 4294920144 ecr 1745103328], length 0
13:21:21.337966 IP 194.187.168.101.https > Asgard.33627: Flags [.], ack 1029, win 65, options [nop,nop,TS val 1745105831 ecr 4294910109], length 0
13:21:21.337981 IP 194.187.168.101.https > Asgard.33628: Flags [.], ack 1183, win 66, options [nop,nop,TS val 1745105831 ecr 4294910111], length 0
13:21:21.368296 IP 194.187.168.101.https > Asgard.33629: Flags [.], ack 1226, win 66, options [nop,nop,TS val 1745105838 ecr 4294910103], length 0
13:21:21.369900 IP 194.187.168.101.https > Asgard.33630: Flags [.], ack 1189, win 66, options [nop,nop,TS val 1745105839 ecr 4294910104], length 0
13:21:21.369917 IP 194.187.168.101.https > Asgard.33624: Flags [.], ack 2277, win 79, options [nop,nop,TS val 1745105839 ecr 4294910109], length 0
13:21:21.393180 IP Asgard.33626 > 194.187.168.101.https: Flags [.], ack 26389, win 652, options [nop,nop,TS val 4294920160 ecr 1745103340], length 0
13:21:21.425126 IP Asgard.59303 > 194.187.168.99.https: Flags [.], ack 128066, win 1444, options [nop,nop,TS val 4294920168 ecr 1744497919], length 0
13:21:21.432764 IP 194.187.168.101.https > Asgard.33626: Flags [.], ack 1773, win 71, options [nop,nop,TS val 1745105854 ecr 4294910110], length 0
13:21:21.464472 IP 194.187.168.99.https > Asgard.59303: Flags [.], ack 2126, win 82, options [nop,nop,TS val 1744500430 ecr 4294910133], length 0
13:21:21.487984 IP ec2-52-26-119-85.us-west-2.compute.amazonaws.com.https > Asgard.57770: Flags [.], ack 824, win 66, options [nop,nop,TS val 127701979 ecr 4294909983], length 0
13:21:21.489152 IP Asgard.59307 > 194.187.168.99.https: Flags [.], ack 150746, win 1444, options [nop,nop,TS val 4294920184 ecr 1744497935], length 0
13:21:21.529100 IP 194.187.168.99.https > Asgard.59307: Flags [.], ack 2274, win 82, options [nop,nop,TS val 1744500446 ecr 4294910148], length 0
13:21:24.561207 IP Asgard.44227 > server-54-230-77-11.cdg50.r.cloudfront.net.https: Flags [.], ack 33700, win 804, options [nop,nop,TS val 4294920952 ecr 3469468756], length 0
13:21:24.561218 IP Asgard.36353 > par03s15-in-f14.1e100.net.http: Flags [.], ack 747, win 251, options [nop,nop,TS val 4294920952 ecr 3492294484], length 0
13:21:24.598441 IP par03s15-in-f14.1e100.net.http > Asgard.36353: Flags [.], ack 437, win 341, options [nop,nop,TS val 3492304526 ecr 4294910915], length 0
13:21:24.598456 IP server-54-230-77-11.cdg50.r.cloudfront.net.https > Asgard.44227: Flags [.], ack 1055, win 74, options [nop,nop,TS val 3469469760 ecr 4294910912], length 0
13:21:25.105218 IP Asgard.47739 > ec2-54-191-130-188.us-west-2.compute.amazonaws.com.https: Flags [.], ack 3501, win 320, options [nop,nop,TS val 4294921088 ecr 79897443], length 0
13:21:25.296059 IP ec2-54-191-130-188.us-west-2.compute.amazonaws.com.https > Asgard.47739: Flags [.], ack 696, win 79, options [nop,nop,TS val 79899993 ecr 4294910933], length 0
13:21:26.961184 IP Asgard.47746 > ec2-54-191-130-188.us-west-2.compute.amazonaws.com.https: Flags [.], ack 3490, win 320, options [nop,nop,TS val 4294921552 ecr 79897907], length 0
13:21:27.152938 IP ec2-54-191-130-188.us-west-2.compute.amazonaws.com.https > Asgard.47746: Flags [.], ack 1284, win 82, options [nop,nop,TS val 79900457 ecr 4294911395], length 0
13:21:27.441182 IP Asgard.33043 > ec2-54-148-98-96.us-west-2.compute.amazonaws.com.https: Flags [.], ack 13500, win 570, options [nop,nop,TS val 4294921672 ecr 1292613360], length 0
13:21:27.634643 IP ec2-54-148-98-96.us-west-2.compute.amazonaws.com.https > Asgard.33043: Flags [.], ack 8003, win 443, options [nop,nop,TS val 1292623566 ecr 4294914068], length 0
13:21:29.617238 IP Asgard.34777 > ec2-52-10-148-1.us-west-2.compute.amazonaws.com.https: Flags [.], ack 5482, win 344, options [nop,nop,TS val 4294922216 ecr 552801584], length 0
13:21:29.808669 IP ec2-52-10-148-1.us-west-2.compute.amazonaws.com.https > Asgard.34777: Flags [.], ack 1912, win 86, options [nop,nop,TS val 552804135 ecr 4294912063], length 0
13:21:30.436575 IP 194.187.168.99.https > Asgard.59309: Flags [P.], seq 2006:2037, ack 888, win 65, options [nop,nop,TS val 1744502671 ecr 4294909911], length 31
13:21:30.436597 IP 194.187.168.99.https > Asgard.59309: Flags [F.], seq 2037, ack 888, win 65, options [nop,nop,TS val 1744502671 ecr 4294909911], length 0
13:21:30.436756 IP Asgard.59309 > 194.187.168.99.https: Flags [F.], seq 888, ack 2038, win 266, options [nop,nop,TS val 4294922420 ecr 1744502671], length 0
13:21:30.475348 IP 194.187.168.99.https > Asgard.59309: Flags [.], ack 889, win 65, options [nop,nop,TS val 1744502681 ecr 4294922420], length 0
13:21:30.879852 IP 194.187.168.99.https > Asgard.59306: Flags [P.], seq 35770:35801, ack 1268, win 70, options [nop,nop,TS val 1744502783 ecr 4294910028], length 31
13:21:30.879881 IP Asgard.59306 > 194.187.168.99.https: Flags [.], ack 35801, win 804, options [nop,nop,TS val 4294922531 ecr 1744502783], length 0
13:21:30.880035 IP Asgard.59306 > 194.187.168.99.https: Flags [F.], seq 1268, ack 35801, win 804, options [nop,nop,TS val 4294922531 ecr 1744502783], length 0
13:21:30.882811 IP 194.187.168.99.https > Asgard.59306: Flags [F.], seq 35801, ack 1268, win 70, options [nop,nop,TS val 1744502783 ecr 4294910028], length 0
13:21:30.882832 IP Asgard.59306 > 194.187.168.99.https: Flags [.], ack 35802, win 804, options [nop,nop,TS val 4294922532 ecr 1744502783], length 0
13:21:30.885640 IP 194.187.168.99.https > Asgard.59308: Flags [P.], seq 20120:20151, ack 1312, win 70, options [nop,nop,TS val 1744502784 ecr 4294910051], length 31
13:21:30.885665 IP Asgard.59308 > 194.187.168.99.https: Flags [.], ack 20151, win 576, options [nop,nop,TS val 4294922533 ecr 1744502784], length 0
13:21:30.885804 IP Asgard.59308 > 194.187.168.99.https: Flags [F.], seq 1312, ack 20151, win 576, options [nop,nop,TS val 4294922533 ecr 1744502784], length 0
13:21:30.887173 IP 194.187.168.99.https > Asgard.59308: Flags [F.], seq 20151, ack 1312, win 70, options [nop,nop,TS val 1744502784 ecr 4294910051], length 0
13:21:30.887194 IP Asgard.59308 > 194.187.168.99.https: Flags [.], ack 20152, win 576, options [nop,nop,TS val 4294922533 ecr 1744502784], length 0
13:21:30.897194 IP Asgard.41525 > 68.232.34.191.https: Flags [.], ack 122381, win 1774, length 0
13:21:30.921329 IP 194.187.168.99.https > Asgard.59306: Flags [.], ack 1269, win 70, options [nop,nop,TS val 1744502792 ecr 4294922531], length 0
13:21:30.925739 IP 194.187.168.99.https > Asgard.59308: Flags [.], ack 1313, win 70, options [nop,nop,TS val 1744502794 ecr 4294922533], length 0
13:21:30.937052 IP 68.232.34.191.https > Asgard.41525: Flags [.], ack 695, win 33, length 0
13:21:30.979410 IP 194.187.168.106.https > Asgard.50215: Flags [P.], seq 11256:11287, ack 790, win 65, options [nop,nop,TS val 1744502807 ecr 4294910051], length 31
13:21:30.979433 IP 194.187.168.106.https > Asgard.50215: Flags [F.], seq 11287, ack 790, win 65, options [nop,nop,TS val 1744502807 ecr 4294910051], length 0
13:21:30.979586 IP Asgard.50215 > 194.187.168.106.https: Flags [F.], seq 790, ack 11288, win 423, options [nop,nop,TS val 4294922556 ecr 1744502807], length 0
13:21:31.021676 IP 194.187.168.106.https > Asgard.50215: Flags [.], ack 791, win 65, options [nop,nop,TS val 1744502817 ecr 4294922556], length 0
13:21:31.126392 IP 194.187.168.101.https > Asgard.33627: Flags [P.], seq 15924:15955, ack 1029, win 65, options [nop,nop,TS val 1745108277 ecr 4294910109], length 31
13:21:31.126418 IP Asgard.33627 > 194.187.168.101.https: Flags [.], ack 15955, win 486, options [nop,nop,TS val 4294922593 ecr 1745108277], length 0
13:21:31.126573 IP Asgard.33627 > 194.187.168.101.https: Flags [F.], seq 1029, ack 15955, win 486, options [nop,nop,TS val 4294922593 ecr 1745108277], length 0
13:21:31.128740 IP 194.187.168.101.https > Asgard.33627: Flags [F.], seq 15955, ack 1029, win 65, options [nop,nop,TS val 1745108277 ecr 4294910109], length 0
13:21:31.128761 IP Asgard.33627 > 194.187.168.101.https: Flags [.], ack 15956, win 486, options [nop,nop,TS val 4294922593 ecr 1745108277], length 0
13:21:31.134688 IP 194.187.168.101.https > Asgard.33628: Flags [P.], seq 16062:16093, ack 1183, win 66, options [nop,nop,TS val 1745108279 ecr 4294910111], length 31
13:21:31.134711 IP Asgard.33628 > 194.187.168.101.https: Flags [.], ack 16093, win 486, options [nop,nop,TS val 4294922595 ecr 1745108279], length 0
13:21:31.134847 IP Asgard.33628 > 194.187.168.101.https: Flags [F.], seq 1183, ack 16093, win 486, options [nop,nop,TS val 4294922595 ecr 1745108279], length 0
13:21:31.137112 IP 194.187.168.101.https > Asgard.33628: Flags [F.], seq 16093, ack 1183, win 66, options [nop,nop,TS val 1745108279 ecr 4294910111], length 0
13:21:31.137133 IP Asgard.33628 > 194.187.168.101.https: Flags [.], ack 16094, win 486, options [nop,nop,TS val 4294922595 ecr 1745108279], length 0
13:21:31.142408 IP 194.187.168.101.https > Asgard.33629: Flags [P.], seq 22896:22927, ack 1226, win 66, options [nop,nop,TS val 1745108281 ecr 4294910103], length 31
13:21:31.142539 IP Asgard.33629 > 194.187.168.101.https: Flags [F.], seq 1226, ack 22927, win 599, options [nop,nop,TS val 4294922597 ecr 1745108281], length 0
13:21:31.143959 IP 194.187.168.101.https > Asgard.33629: Flags [F.], seq 22927, ack 1226, win 66, options [nop,nop,TS val 1745108281 ecr 4294910103], length 0
13:21:31.143976 IP Asgard.33629 > 194.187.168.101.https: Flags [.], ack 22928, win 599, options [nop,nop,TS val 4294922597 ecr 1745108281], length 0
13:21:31.151895 IP 194.187.168.101.https > Asgard.33630: Flags [P.], seq 19195:19226, ack 1189, win 66, options [nop,nop,TS val 1745108283 ecr 4294910104], length 31
13:21:31.152024 IP Asgard.33630 > 194.187.168.101.https: Flags [F.], seq 1189, ack 19226, win 554, options [nop,nop,TS val 4294922599 ecr 1745108283], length 0
13:21:31.153452 IP 194.187.168.101.https > Asgard.33630: Flags [F.], seq 19226, ack 1189, win 66, options [nop,nop,TS val 1745108283 ecr 4294910104], length 0
13:21:31.153468 IP Asgard.33630 > 194.187.168.101.https: Flags [.], ack 19227, win 554, options [nop,nop,TS val 4294922600 ecr 1745108283], length 0
13:21:31.166121 IP 194.187.168.101.https > Asgard.33627: Flags [.], ack 1030, win 65, options [nop,nop,TS val 1745108286 ecr 4294922593], length 0
13:21:31.174676 IP 194.187.168.101.https > Asgard.33628: Flags [.], ack 1184, win 66, options [nop,nop,TS val 1745108289 ecr 4294922595], length 0
13:21:31.182859 IP 194.187.168.101.https > Asgard.33629: Flags [.], ack 1227, win 66, options [nop,nop,TS val 1745108291 ecr 4294922597], length 0
13:21:31.191602 IP 194.187.168.101.https > Asgard.33630: Flags [.], ack 1190, win 66, options [nop,nop,TS val 1745108293 ecr 4294922599], length 0
13:21:31.210642 IP 194.187.168.101.https > Asgard.33624: Flags [P.], seq 57525:57556, ack 2277, win 79, options [nop,nop,TS val 1745108298 ecr 4294910109], length 31
13:21:31.210763 IP Asgard.33624 > 194.187.168.101.https: Flags [F.], seq 2277, ack 57556, win 1149, options [nop,nop,TS val 4294922614 ecr 1745108298], length 0
13:21:31.214709 IP 194.187.168.101.https > Asgard.33624: Flags [F.], seq 57556, ack 2277, win 79, options [nop,nop,TS val 1745108298 ecr 4294910109], length 0
13:21:31.214733 IP Asgard.33624 > 194.187.168.101.https: Flags [.], ack 57557, win 1149, options [nop,nop,TS val 4294922615 ecr 1745108298], length 0
13:21:31.218928 IP 194.187.168.101.https > Asgard.33626: Flags [P.], seq 26389:26420, ack 1773, win 71, options [nop,nop,TS val 1745108300 ecr 4294910110], length 31
13:21:31.219085 IP Asgard.33626 > 194.187.168.101.https: Flags [F.], seq 1773, ack 26420, win 652, options [nop,nop,TS val 4294922616 ecr 1745108300], length 0
13:21:31.220488 IP 194.187.168.101.https > Asgard.33626: Flags [F.], seq 26420, ack 1773, win 71, options [nop,nop,TS val 1745108300 ecr 4294910110], length 0
13:21:31.220509 IP Asgard.33626 > 194.187.168.101.https: Flags [.], ack 26421, win 652, options [nop,nop,TS val 4294922616 ecr 1745108300], length 0
13:21:31.250418 IP 194.187.168.101.https > Asgard.33624: Flags [.], ack 2278, win 79, options [nop,nop,TS val 1745108308 ecr 4294922614], length 0
13:21:31.259336 IP 194.187.168.101.https > Asgard.33626: Flags [.], ack 1774, win 71, options [nop,nop,TS val 1745108310 ecr 4294922616], length 0
13:21:31.304808 IP 194.187.168.99.https > Asgard.59303: Flags [P.], seq 128066:128097, ack 2126, win 82, options [nop,nop,TS val 1744502889 ecr 4294910133], length 31
13:21:31.304833 IP Asgard.59303 > 194.187.168.99.https: Flags [.], ack 128097, win 1444, options [nop,nop,TS val 4294922637 ecr 1744502889], length 0
13:21:31.304967 IP Asgard.59303 > 194.187.168.99.https: Flags [F.], seq 2126, ack 128097, win 1444, options [nop,nop,TS val 4294922637 ecr 1744502889], length 0
13:21:31.307155 IP 194.187.168.99.https > Asgard.59303: Flags [F.], seq 128097, ack 2126, win 82, options [nop,nop,TS val 1744502889 ecr 4294910133], length 0
13:21:31.307177 IP Asgard.59303 > 194.187.168.99.https: Flags [.], ack 128098, win 1444, options [nop,nop,TS val 4294922638 ecr 1744502889], length 0
13:21:31.343231 IP 194.187.168.99.https > Asgard.59303: Flags [.], ack 2127, win 82, options [nop,nop,TS val 1744502898 ecr 4294922637], length 0
13:21:31.368105 IP 194.187.168.99.https > Asgard.59307: Flags [P.], seq 150746:150777, ack 2274, win 82, options [nop,nop,TS val 1744502905 ecr 4294910148], length 31
13:21:31.368288 IP Asgard.59307 > 194.187.168.99.https: Flags [F.], seq 2274, ack 150777, win 1444, options [nop,nop,TS val 4294922653 ecr 1744502905], length 0
13:21:31.369663 IP 194.187.168.99.https > Asgard.59307: Flags [F.], seq 150777, ack 2274, win 82, options [nop,nop,TS val 1744502905 ecr 4294910148], length 0
13:21:31.369687 IP Asgard.59307 > 194.187.168.99.https: Flags [.], ack 150778, win 1444, options [nop,nop,TS val 4294922654 ecr 1744502905], length 0
13:21:31.407923 IP 194.187.168.99.https > Asgard.59307: Flags [.], ack 2275, win 82, options [nop,nop,TS val 1744502914 ecr 4294922653], length 0
13:21:31.505179 IP Asgard.57770 > ec2-52-26-119-85.us-west-2.compute.amazonaws.com.https: Flags [.], ack 3375, win 320, options [nop,nop,TS val 4294922688 ecr 127701979], length 0
13:21:31.694806 IP ec2-52-26-119-85.us-west-2.compute.amazonaws.com.https > Asgard.57770: Flags [.], ack 824, win 66, options [nop,nop,TS val 127704530 ecr 4294909983], length 0
13:21:34.609167 IP Asgard.44227 > server-54-230-77-11.cdg50.r.cloudfront.net.https: Flags [.], ack 33700, win 804, options [nop,nop,TS val 4294923464 ecr 3469469760], length 0
13:21:34.609187 IP Asgard.36353 > par03s15-in-f14.1e100.net.http: Flags [.], ack 747, win 251, options [nop,nop,TS val 4294923464 ecr 3492304526], length 0
13:21:34.647379 IP par03s15-in-f14.1e100.net.http > Asgard.36353: Flags [.], ack 437, win 341, options [nop,nop,TS val 3492314570 ecr 4294910915], length 0
13:21:34.647401 IP server-54-230-77-11.cdg50.r.cloudfront.net.https > Asgard.44227: Flags [.], ack 1055, win 74, options [nop,nop,TS val 3469470765 ecr 4294910912], length 0
13:21:35.313164 IP Asgard.47739 > ec2-54-191-130-188.us-west-2.compute.amazonaws.com.https: Flags [.], ack 3501, win 320, options [nop,nop,TS val 4294923640 ecr 79899993], length 0
13:21:35.504614 IP ec2-54-191-130-188.us-west-2.compute.amazonaws.com.https > Asgard.47739: Flags [.], ack 696, win 79, options [nop,nop,TS val 79902544 ecr 4294910933], length 0
13:21:37.169205 IP Asgard.47746 > ec2-54-191-130-188.us-west-2.compute.amazonaws.com.https: Flags [.], ack 3490, win 320, options [nop,nop,TS val 4294924104 ecr 79900457], length 0
13:21:37.359683 IP ec2-54-191-130-188.us-west-2.compute.amazonaws.com.https > Asgard.47746: Flags [.], ack 1284, win 82, options [nop,nop,TS val 79903008 ecr 4294911395], length 0
13:21:37.649191 IP Asgard.33043 > ec2-54-148-98-96.us-west-2.compute.amazonaws.com.https: Flags [.], ack 13500, win 570, options [nop,nop,TS val 4294924224 ecr 1292623566], length 0
13:21:37.843145 IP ec2-54-148-98-96.us-west-2.compute.amazonaws.com.https > Asgard.33043: Flags [.], ack 8003, win 443, options [nop,nop,TS val 1292633769 ecr 4294914068], length 0
13:21:39.825164 IP Asgard.34777 > ec2-52-10-148-1.us-west-2.compute.amazonaws.com.https: Flags [.], ack 5482, win 344, options [nop,nop,TS val 4294924768 ecr 552804135], length 0
13:21:40.015694 IP ec2-52-10-148-1.us-west-2.compute.amazonaws.com.https > Asgard.34777: Flags [.], ack 1912, win 86, options [nop,nop,TS val 552806685 ecr 4294912063], length 0
13:21:40.945176 IP Asgard.41525 > 68.232.34.191.https: Flags [.], ack 122381, win 1774, length 0
13:21:40.982942 IP 68.232.34.191.https > Asgard.41525: Flags [.], ack 695, win 33, length 0
13:21:41.052656 IP ec2-52-26-119-85.us-west-2.compute.amazonaws.com.https > Asgard.57770: Flags [P.], seq 3375:3406, ack 824, win 66, options [nop,nop,TS val 127706868 ecr 4294909983], length 31
13:21:41.052669 IP Asgard.57770 > ec2-52-26-119-85.us-west-2.compute.amazonaws.com.https: Flags [.], ack 3406, win 320, options [nop,nop,TS val 4294925074 ecr 127706868], length 0
13:21:41.052767 IP Asgard.57770 > ec2-52-26-119-85.us-west-2.compute.amazonaws.com.https: Flags [F.], seq 824, ack 3406, win 320, options [nop,nop,TS val 4294925074 ecr 127706868], length 0
13:21:41.243242 IP ec2-52-26-119-85.us-west-2.compute.amazonaws.com.https > Asgard.57770: Flags [F.], seq 3406, ack 825, win 66, options [nop,nop,TS val 127706916 ecr 4294925074], length 0
13:21:41.243249 IP Asgard.57770 > ec2-52-26-119-85.us-west-2.compute.amazonaws.com.https: Flags [.], ack 3407, win 320, options [nop,nop,TS val 4294925122 ecr 127706916], length 0
13:21:43.501958 IP Asgard.52145 > par03s14-in-f14.1e100.net.https: Flags [P.], seq 1615:1661, ack 9560, win 447, options [nop,nop,TS val 4294925687 ecr 926518167], length 46
13:21:43.502002 IP Asgard.45812 > par03s13-in-f9.1e100.net.https: Flags [P.], seq 5772:5818, ack 5637, win 363, options [nop,nop,TS val 4294925687 ecr 3146384493], length 46
13:21:43.537604 IP par03s14-in-f14.1e100.net.https > Asgard.52145: Flags [.], ack 1661, win 383, options [nop,nop,TS val 926576796 ecr 4294925687], length 0
13:21:43.537627 IP par03s14-in-f14.1e100.net.https > Asgard.52145: Flags [P.], seq 9560:9620, ack 1661, win 383, options [nop,nop,TS val 926576796 ecr 4294925687], length 60
13:21:43.537758 IP Asgard.52145 > par03s14-in-f14.1e100.net.https: Flags [P.], seq 1661:1707, ack 9620, win 447, options [nop,nop,TS val 4294925696 ecr 926576796], length 46
13:21:43.537931 IP Asgard.52145 > par03s14-in-f14.1e100.net.https: Flags [P.], seq 1707:1738, ack 9620, win 447, options [nop,nop,TS val 4294925696 ecr 926576796], length 31
13:21:43.537949 IP Asgard.52145 > par03s14-in-f14.1e100.net.https: Flags [F.], seq 1738, ack 9620, win 447, options [nop,nop,TS val 4294925696 ecr 926576796], length 0
13:21:43.539629 IP par03s14-in-f14.1e100.net.https > Asgard.52145: Flags [F.], seq 9620, ack 1661, win 383, options [nop,nop,TS val 926576796 ecr 4294925687], length 0
13:21:43.539652 IP Asgard.52145 > par03s14-in-f14.1e100.net.https: Flags [.], ack 9621, win 447, options [nop,nop,TS val 4294925696 ecr 926576796], length 0
13:21:43.539659 IP par03s13-in-f9.1e100.net.https > Asgard.45812: Flags [.], ack 5818, win 438, options [nop,nop,TS val 3146443405 ecr 4294925687], length 0
13:21:43.539666 IP par03s13-in-f9.1e100.net.https > Asgard.45812: Flags [P.], seq 5637:5697, ack 5818, win 438, options [nop,nop,TS val 3146443405 ecr 4294925687], length 60
13:21:43.539673 IP par03s13-in-f9.1e100.net.https > Asgard.45812: Flags [F.], seq 5697, ack 5818, win 438, options [nop,nop,TS val 3146443405 ecr 4294925687], length 0
13:21:43.539791 IP Asgard.45812 > par03s13-in-f9.1e100.net.https: Flags [P.], seq 5818:5864, ack 5698, win 363, options [nop,nop,TS val 4294925696 ecr 3146443405], length 46
13:21:43.539915 IP Asgard.45812 > par03s13-in-f9.1e100.net.https: Flags [FP.], seq 5864:5895, ack 5698, win 363, options [nop,nop,TS val 4294925696 ecr 3146443405], length 31
13:21:43.574483 IP par03s14-in-f14.1e100.net.https > Asgard.52145: Flags [R], seq 1049407401, win 0, length 0
13:21:43.576048 IP par03s14-in-f14.1e100.net.https > Asgard.52145: Flags [R], seq 1049407401, win 0, length 0
13:21:43.576060 IP par03s14-in-f14.1e100.net.https > Asgard.52145: Flags [R], seq 1049407401, win 0, length 0
13:21:43.577596 IP par03s14-in-f14.1e100.net.https > Asgard.52145: Flags [R], seq 1049407402, win 0, length 0
13:21:43.577615 IP par03s13-in-f9.1e100.net.https > Asgard.45812: Flags [R], seq 2553496563, win 0, length 0
13:21:43.579871 IP par03s13-in-f9.1e100.net.https > Asgard.45812: Flags [R], seq 2553496563, win 0, length 0
13:21:43.976909 IP ec2-54-191-130-188.us-west-2.compute.amazonaws.com.https > Asgard.47739: Flags [P.], seq 3501:3532, ack 696, win 79, options [nop,nop,TS val 79904661 ecr 4294910933], length 31
13:21:43.977092 IP Asgard.47739 > ec2-54-191-130-188.us-west-2.compute.amazonaws.com.https: Flags [F.], seq 696, ack 3532, win 320, options [nop,nop,TS val 4294925805 ecr 79904661], length 0
13:21:43.978459 IP ec2-54-191-130-188.us-west-2.compute.amazonaws.com.https > Asgard.47739: Flags [F.], seq 3532, ack 696, win 79, options [nop,nop,TS val 79904661 ecr 4294910933], length 0
13:21:43.978478 IP Asgard.47739 > ec2-54-191-130-188.us-west-2.compute.amazonaws.com.https: Flags [.], ack 3533, win 320, options [nop,nop,TS val 4294925806 ecr 79904661], length 0
13:21:44.168563 IP ec2-54-191-130-188.us-west-2.compute.amazonaws.com.https > Asgard.47739: Flags [.], ack 697, win 79, options [nop,nop,TS val 79904709 ecr 4294925805], length 0
13:21:44.657149 IP Asgard.44227 > server-54-230-77-11.cdg50.r.cloudfront.net.https: Flags [.], ack 33700, win 804, options [nop,nop,TS val 4294925976 ecr 3469470765], length 0
13:21:44.657156 IP Asgard.36353 > par03s15-in-f14.1e100.net.http: Flags [.], ack 747, win 251, options [nop,nop,TS val 4294925976 ecr 3492314570], length 0
13:21:44.697510 IP par03s15-in-f14.1e100.net.http > Asgard.36353: Flags [.], ack 437, win 341, options [nop,nop,TS val 3492324612 ecr 4294910915], length 0
13:21:44.697520 IP server-54-230-77-11.cdg50.r.cloudfront.net.https > Asgard.44227: Flags [.], ack 1055, win 74, options [nop,nop,TS val 3469471769 ecr 4294910912], length 0
13:21:45.976056 IP ec2-54-191-130-188.us-west-2.compute.amazonaws.com.https > Asgard.47746: Flags [P.], seq 3490:3521, ack 1284, win 82, options [nop,nop,TS val 79905161 ecr 4294911395], length 31
13:21:45.976071 IP ec2-54-191-130-188.us-west-2.compute.amazonaws.com.https > Asgard.47746: Flags [F.], seq 3521, ack 1284, win 82, options [nop,nop,TS val 79905161 ecr 4294911395], length 0
13:21:45.976172 IP Asgard.47746 > ec2-54-191-130-188.us-west-2.compute.amazonaws.com.https: Flags [F.], seq 1284, ack 3522, win 320, options [nop,nop,TS val 4294926305 ecr 79905161], length 0
13:21:46.166245 IP ec2-54-191-130-188.us-west-2.compute.amazonaws.com.https > Asgard.47746: Flags [.], ack 1285, win 82, options [nop,nop,TS val 79905209 ecr 4294926305], length 0
13:21:47.857354 IP Asgard.33043 > ec2-54-148-98-96.us-west-2.compute.amazonaws.com.https: Flags [.], ack 13500, win 570, options [nop,nop,TS val 4294926776 ecr 1292633769], length 0
13:21:48.049427 IP ec2-54-148-98-96.us-west-2.compute.amazonaws.com.https > Asgard.33043: Flags [.], ack 8003, win 443, options [nop,nop,TS val 1292643969 ecr 4294914068], length 0
13:21:48.275508 ARP, Request who-has Asgard tell 192.168.1.254, length 46
13:21:48.275515 ARP, Reply Asgard is-at 74:d0:2b:9e:fb:40 (oui Unknown), length 28
13:21:49.397665 IP ec2-52-10-148-1.us-west-2.compute.amazonaws.com.https > Asgard.34777: Flags [P.], seq 5482:5513, ack 1912, win 86, options [nop,nop,TS val 552809030 ecr 4294912063], length 31
13:21:49.397685 IP Asgard.34777 > ec2-52-10-148-1.us-west-2.compute.amazonaws.com.https: Flags [.], ack 5513, win 344, options [nop,nop,TS val 4294927161 ecr 552809030], length 0
13:21:49.397781 IP Asgard.34777 > ec2-52-10-148-1.us-west-2.compute.amazonaws.com.https: Flags [F.], seq 1912, ack 5513, win 344, options [nop,nop,TS val 4294927161 ecr 552809030], length 0
13:21:49.589122 IP ec2-52-10-148-1.us-west-2.compute.amazonaws.com.https > Asgard.34777: Flags [F.], seq 5513, ack 1913, win 86, options [nop,nop,TS val 552809077 ecr 4294927161], length 0
13:21:49.589139 IP Asgard.34777 > ec2-52-10-148-1.us-west-2.compute.amazonaws.com.https: Flags [.], ack 5514, win 344, options [nop,nop,TS val 4294927208 ecr 552809077], length 0
13:21:50.993172 IP Asgard.41525 > 68.232.34.191.https: Flags [.], ack 122381, win 1774, length 0
13:21:51.031619 IP 68.232.34.191.https > Asgard.41525: Flags [.], ack 695, win 33, length 0
13:21:54.705343 IP Asgard.44227 > server-54-230-77-11.cdg50.r.cloudfront.net.https: Flags [.], ack 33700, win 804, options [nop,nop,TS val 4294928488 ecr 3469471769], length 0
13:21:54.705361 IP Asgard.36353 > par03s15-in-f14.1e100.net.http: Flags [.], ack 747, win 251, options [nop,nop,TS val 4294928488 ecr 3492324612], length 0
13:21:54.743281 IP par03s15-in-f14.1e100.net.http > Asgard.36353: Flags [.], ack 437, win 341, options [nop,nop,TS val 3492334656 ecr 4294910915], length 0
13:21:54.743305 IP server-54-230-77-11.cdg50.r.cloudfront.net.https > Asgard.44227: Flags [.], ack 1055, win 74, options [nop,nop,TS val 3469472773 ecr 4294910912], length 0
13:21:58.065147 IP Asgard.33043 > ec2-54-148-98-96.us-west-2.compute.amazonaws.com.https: Flags [.], ack 13500, win 570, options [nop,nop,TS val 4294929328 ecr 1292643969], length 0
13:21:58.264837 IP ec2-54-148-98-96.us-west-2.compute.amazonaws.com.https > Asgard.33043: Flags [.], ack 8003, win 443, options [nop,nop,TS val 1292654174 ecr 4294914068], length 0
13:22:01.041151 IP Asgard.41525 > 68.232.34.191.https: Flags [.], ack 122381, win 1774, length 0
13:22:01.083512 IP 68.232.34.191.https > Asgard.41525: Flags [.], ack 695, win 33, length 0
13:22:02.059619 IP ec2-54-148-98-96.us-west-2.compute.amazonaws.com.https > Asgard.33043: Flags [P.], seq 13500:13531, ack 8003, win 443, options [nop,nop,TS val 1292657974 ecr 4294914068], length 31
13:22:02.059639 IP Asgard.33043 > ec2-54-148-98-96.us-west-2.compute.amazonaws.com.https: Flags [.], ack 13531, win 570, options [nop,nop,TS val 4294930326 ecr 1292657974], length 0
13:22:02.059735 IP Asgard.33043 > ec2-54-148-98-96.us-west-2.compute.amazonaws.com.https: Flags [F.], seq 8003, ack 13531, win 570, options [nop,nop,TS val 4294930326 ecr 1292657974], length 0
13:22:02.060484 IP ec2-54-148-98-96.us-west-2.compute.amazonaws.com.https > Asgard.33043: Flags [F.], seq 13531, ack 8003, win 443, options [nop,nop,TS val 1292657974 ecr 4294914068], length 0
13:22:02.060496 IP Asgard.33043 > ec2-54-148-98-96.us-west-2.compute.amazonaws.com.https: Flags [.], ack 13532, win 570, options [nop,nop,TS val 4294930326 ecr 1292657974], length 0
13:22:02.256116 IP ec2-54-148-98-96.us-west-2.compute.amazonaws.com.https > Asgard.33043: Flags [.], ack 8004, win 443, options [nop,nop,TS val 1292658167 ecr 4294930326], length 0
13:22:04.753236 IP Asgard.44227 > server-54-230-77-11.cdg50.r.cloudfront.net.https: Flags [.], ack 33700, win 804, options [nop,nop,TS val 4294931000 ecr 3469472773], length 0
13:22:04.753245 IP Asgard.36353 > par03s15-in-f14.1e100.net.http: Flags [.], ack 747, win 251, options [nop,nop,TS val 4294931000 ecr 3492334656], length 0
13:22:04.792079 IP par03s15-in-f14.1e100.net.http > Asgard.36353: Flags [.], ack 437, win 341, options [nop,nop,TS val 3492344699 ecr 4294910915], length 0
13:22:04.792090 IP server-54-230-77-11.cdg50.r.cloudfront.net.https > Asgard.44227: Flags [.], ack 1055, win 74, options [nop,nop,TS val 3469473778 ecr 4294910912], length 0
13:22:11.089148 IP Asgard.41525 > 68.232.34.191.https: Flags [.], ack 122381, win 1774, length 0
13:22:11.127209 IP 68.232.34.191.https > Asgard.41525: Flags [.], ack 695, win 33, length 0
13:22:12.664736 IP6 fe80::76d0:2bff:fe9e:fb40.mdns > ff02::fb.mdns: 0 [2q] PTR (QM)? _ipp._tcp.local. PTR (QM)? _ipps._tcp.local. (45)
13:22:12.664771 IP Asgard.mdns > 224.0.0.251.mdns: 0 [2q] PTR (QM)? _ipp._tcp.local. PTR (QM)? _ipps._tcp.local. (45)
13:22:14.801150 IP Asgard.44227 > server-54-230-77-11.cdg50.r.cloudfront.net.https: Flags [.], ack 33700, win 804, options [nop,nop,TS val 4294933512 ecr 3469473778], length 0
13:22:14.801159 IP Asgard.36353 > par03s15-in-f14.1e100.net.http: Flags [.], ack 747, win 251, options [nop,nop,TS val 4294933512 ecr 3492344699], length 0
13:22:14.838313 IP par03s15-in-f14.1e100.net.http > Asgard.36353: Flags [.], ack 437, win 341, options [nop,nop,TS val 3492354741 ecr 4294910915], length 0
13:22:14.838323 IP server-54-230-77-11.cdg50.r.cloudfront.net.https > Asgard.44227: Flags [.], ack 1055, win 74, options [nop,nop,TS val 3469474782 ecr 4294910912], length 0
13:22:18.323108 ARP, Request who-has Asgard tell 192.168.1.254, length 46
13:22:18.323121 ARP, Reply Asgard is-at 74:d0:2b:9e:fb:40 (oui Unknown), length 28

→ ec2-54-148-98-96.us-west-2.compute.amazonaws.com.https → apparaît toujours - ou est-ce que j'interprète mal ce retour de commande ?

Dernière modification par Coeur Noir (Le 30/08/2015, à 12:24)


DébuterDocBien rédigerRetour commandeInsérer image | illustrations & captures d'écran <>

Hors ligne

#43 Le 30/08/2015, à 12:44

credenhill

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

essayer

sudo bash -c 'echo "ALL:    amazonaws.com" >> /etc/hosts.deny'
ou
sudo tee -a  /etc/hosts.deny <<<"ALL:    amazonaws.com"

Hors ligne

#44 Le 30/08/2015, à 14:12

Coeur Noir

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

Merci Credenhill.

J'ai modifié hosts.deny avec gedit en sudo.

Mais même après modif' et reboot, je vois toujours autant de :

ec2-54-148-98-96.us-west-2.compute.amazonaws.com.https

dans le retour de sudo tcpdump -i eth0 (voir #42) à moins que j'interprète mal ce retour ?


DébuterDocBien rédigerRetour commandeInsérer image | illustrations & captures d'écran <>

Hors ligne

#45 Le 30/08/2015, à 14:47

Compte anonymisé

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

Bonjour.

Mauvaise nouvelle :
Même les fichiers hosts ne peuvent pas filtrer tout ce qui part et vient de cloudfront.net.

Sinon, ec2-54-148-98-96.us-west-2.compute.amazonaws.com.https, j'ai l'impression que c'est la même IP que shavar.prods.mozaws.net.
J'ai regardé le paquet IP capturé par Wireshark et Tcpdump au même temps t.

Firefox discute avec les ports
- source 49927 destination 443 pour shavar.prods.mozaws.net.
- source 49923 destination 443 pour cloudfront.net

Encore plus vicieux, les IP de ces domaines changent régulièrement.

#46 Le 30/08/2015, à 14:52

Compte anonymisé

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

Bonjour.
Étant sur une Debian, je vous livre mes logs pour un simple affichage d'une page sur le forum ubntu-fr. Je n'ai pas votre spécificité, mon Iceweasel ne communique pas avec Amazon...
J'utilise Bind pour résoudre les dns et non ceux de mon FAI et j'ai bien sur privoxy... Rien d'autre d'installé wink


root@debian:/home/libc6# tcpdump -v
15:41:31.981286 IP6 (hlim 255, next-header UDP (17) payload length: 50) fe80::96db:c9ff:feb6:c2d0.mdns > ff02::fb.mdns: [udp sum ok] 0 PTR (QM)? 251.0.0.224.in-addr.arpa. (42)
15:41:31.981443 IP (tos 0x0, ttl 255, id 47035, offset 0, flags [DF], proto UDP (17), length 70)
    debian.local.mdns > 224.0.0.251.mdns: 0 PTR (QM)? 251.0.0.224.in-addr.arpa. (42)
15:41:32.315865 IP (tos 0x0, ttl 64, id 55021, offset 0, flags [none], proto UDP (17), length 76)
    debian.local.63575 > c.dns.gandi.net.domain: 17419% [1au] A? forum.ubuntu-fr.org. (48)
15:41:32.361044 IP (tos 0x0, ttl 53, id 52141, offset 0, flags [none], proto UDP (17), length 153)
    c.dns.gandi.net.domain > debian.local.63575: 17419*- 1/3/1 forum.ubuntu-fr.org. A 193.52.104.60 (125)
15:41:32.361764 IP (tos 0x0, ttl 64, id 37368, offset 0, flags [DF], proto TCP (6), length 60)
    debian.local.55239 > revaccess.ha.univ-nantes.fr.https: Flags [s], cksum 0xeb53 (incorrect -> 0x6a04), seq 2248537416, win 14600, options [mss 1460,sackOK,TS val 5137584 ecr 0,nop,wscale 6], length 0
15:41:32.415682 IP (tos 0x0, ttl 49, id 0, offset 0, flags [DF], proto TCP (6), length 60)
    revaccess.ha.univ-nantes.fr.https > debian.local.55239: Flags [S.], cksum 0x4d1c (correct), seq 1406250844, ack 2248537417, win 28960, options [mss 1452,sackOK,TS val 96197596 ecr 5137584,nop,wscale 7], length 0
15:41:32.415782 IP (tos 0x0, ttl 64, id 37369, offset 0, flags [DF], proto TCP (6), length 52)
    debian.local.55239 > revaccess.ha.univ-nantes.fr.https: Flags [.], cksum 0xeb4b (incorrect -> 0xec0d), ack 1, win 229, options [nop,nop,TS val 5137598 ecr 96197596], length 0
15:41:32.416574 IP (tos 0x0, ttl 64, id 37370, offset 0, flags [DF], proto TCP (6), length 295)
    debian.local.55239 > revaccess.ha.univ-nantes.fr.https: Flags [P.], cksum 0xe432 (correct), seq 1:244, ack 1, win 229, options [nop,nop,TS val 5137598 ecr 96197596], length 243
15:41:32.474034 IP (tos 0x0, ttl 49, id 29887, offset 0, flags [DF], proto TCP (6), length 52)
    revaccess.ha.univ-nantes.fr.https > debian.local.55239: Flags [.], cksum 0xeb0e (correct), ack 244, win 235, options [nop,nop,TS val 96197602 ecr 5137598], length 0
15:41:32.480052 IP (tos 0x0, ttl 49, id 29888, offset 0, flags [DF], proto TCP (6), length 1492)
    revaccess.ha.univ-nantes.fr.https > debian.local.55239: Flags [.], cksum 0xf07b (correct), seq 1:1441, ack 244, win 235, options [nop,nop,TS val 96197602 ecr 5137598], length 1440
15:41:32.480102 IP (tos 0x0, ttl 64, id 37371, offset 0, flags [DF], proto TCP (6), length 52)
    debian.local.55239 > revaccess.ha.univ-nantes.fr.https: Flags [.], cksum 0xeb4b (incorrect -> 0xe537), ack 1441, win 274, options [nop,nop,TS val 5137614 ecr 96197602], length 0
15:41:32.485922 IP (tos 0x0, ttl 49, id 29889, offset 0, flags [DF], proto TCP (6), length 1492)
    revaccess.ha.univ-nantes.fr.https > debian.local.55239: Flags [.], cksum 0x6682 (correct), seq 1441:2881, ack 244, win 235, options [nop,nop,TS val 96197602 ecr 5137598], length 1440
15:41:32.485966 IP (tos 0x0, ttl 64, id 37372, offset 0, flags [DF], proto TCP (6), length 52)
    debian.local.55239 > revaccess.ha.univ-nantes.fr.https: Flags [.], cksum 0xeb4b (incorrect -> 0xdf69), ack 2881, win 319, options [nop,nop,TS val 5137615 ecr 96197602], length 0
15:41:32.491375 IP (tos 0x0, ttl 49, id 29890, offset 0, flags [DF], proto TCP (6), length 1492)
    revaccess.ha.univ-nantes.fr.https > debian.local.55239: Flags [.], cksum 0x8e4a (correct), seq 2881:4321, ack 244, win 235, options [nop,nop,TS val 96197602 ecr 5137598], length 1440
15:41:32.491419 IP (tos 0x0, ttl 64, id 37373, offset 0, flags [DF], proto TCP (6), length 52)
    debian.local.55239 > revaccess.ha.univ-nantes.fr.https: Flags [.], cksum 0xeb4b (incorrect -> 0xd99b), ack 4321, win 364, options [nop,nop,TS val 5137616 ecr 96197602], length 0
15:41:32.492831 IP (tos 0x0, ttl 49, id 29891, offset 0, flags [DF], proto TCP (6), length 373)
    revaccess.ha.univ-nantes.fr.https > debian.local.55239: Flags [P.], cksum 0x4492 (correct), seq 4321:4642, ack 244, win 235, options [nop,nop,TS val 96197602 ecr 5137598], length 321
15:41:32.492903 IP (tos 0x0, ttl 64, id 37374, offset 0, flags [DF], proto TCP (6), length 52)
    debian.local.55239 > revaccess.ha.univ-nantes.fr.https: Flags [.], cksum 0xeb4b (incorrect -> 0xd82c), ack 4642, win 409, options [nop,nop,TS val 5137617 ecr 96197602], length 0
15:41:32.526411 IP (tos 0x0, ttl 64, id 37375, offset 0, flags [DF], proto TCP (6), length 178)
    debian.local.55239 > revaccess.ha.univ-nantes.fr.https: Flags [P.], cksum 0x3077 (correct), seq 244:370, ack 4642, win 409, options [nop,nop,TS val 5137625 ecr 96197602], length 126
15:41:32.559737 IP (tos 0x0, ttl 64, id 1394, offset 0, flags [none], proto UDP (17), length 75)
    debian.local.58273 > ns1.comododns.net.domain: 44209% [1au] AAAA? ocsp.usertrust.com. (47)
15:41:32.559900 IP (tos 0x0, ttl 64, id 1395, offset 0, flags [none], proto UDP (17), length 75)
    debian.local.35014 > ns1.comododns.net.domain: 60505% [1au] A? ocsp.usertrust.com. (47)
15:41:32.581780 IP (tos 0x0, ttl 49, id 29892, offset 0, flags [DF], proto TCP (6), length 326)
    revaccess.ha.univ-nantes.fr.https > debian.local.55239: Flags [P.], cksum 0xc2db (correct), seq 4642:4916, ack 370, win 235, options [nop,nop,TS val 96197613 ecr 5137625], length 274
15:41:32.619436 IP (tos 0x0, ttl 64, id 37376, offset 0, flags [DF], proto TCP (6), length 52)
    debian.local.55239 > revaccess.ha.univ-nantes.fr.https: Flags [.], cksum 0xeb4b (incorrect -> 0xd644), ack 4916, win 454, options [nop,nop,TS val 5137649 ecr 96197613], length 0
15:41:32.621238 IP (tos 0x0, ttl 52, id 32920, offset 0, flags [none], proto UDP (17), length 103)
    ns1.comododns.net.domain > debian.local.58273: 44209*- 1/0/1 ocsp.usertrust.com. AAAA 2a02:1788:2fd::b2ff:5301 (75)
15:41:34.045018 IP (tos 0x0, ttl 64, id 37702, offset 0, flags [none], proto UDP (17), length 79)
    debian.local.11311 > a.iana-servers.net.domain: 7474% [1au] PTR? 2.0.0.224.in-addr.arpa. (51)
15:41:34.091481 IP (tos 0x0, ttl 56, id 50254, offset 0, flags [none], proto UDP (17), length 559)
    a.iana-servers.net.domain > debian.local.11311: 7474*- 2/5/1 2.0.0.224.in-addr.arpa. PTR all-routers.mcast.net., 2.0.0.224.in-addr.arpa. RRSIG (531)
15:41:34.127116 IP (tos 0x0, ttl 64, id 58468, offset 0, flags [none], proto UDP (17), length 82)
    debian.local.13170 > blackhole-2.iana.org.domain: 21139% [1au] PTR? 20.1.168.192.in-addr.arpa. (54)
15:41:34.169987 IP (tos 0x0, ttl 54, id 18335, offset 0, flags [none], proto UDP (17), length 179)
    blackhole-2.iana.org.domain > debian.local.13170: 21139 NXDomain*- 0/1/1 (151)

#47 Le 30/08/2015, à 18:19

moko138

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

jojo81 a écrit :

Je crois avoir pu bloquer cloudfront.net mais pas encore amazonaws hmm

Pour que je puisse comparer chez moi,
- quels sites visites-tu pour tester ?
- sudo tcpdump -i wlan<x>, est-ce correct, comme contrôle ? (je n'ai pas de liaison filaire)


%NOINDEX%
Un utilitaire précieux : ncdu
Photo, mini-tutoriel :  À la découverte de dcraw

Hors ligne

#48 Le 30/08/2015, à 19:01

Compte anonymisé

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

@moko138, je ne visite pas de site, et je n'ai pas de page au démarrage.
J'ai ces connexions sans aucun site de visité, mais ça ne dure pas.

Sinon, Ludovic avait proposé cette commande tcpdump interessante et c'est là où j'avais dit que c'étaient des datagrammes IP où l'on peut savoir en l’occurrence Qui transmet à Qui sous quel port.

Pour l'option -i <wlan>, il faut préciser l'interface wlan sinon, il prend ethernet. Je crois selon mes souvenirs que tu peux lui demander -i any

PS : Je n'aurais peut-être pendant ces prochains jours pas l'occasion de démarrer de machines Linux hormis ma centos 7 et serais sous Windows. Je sais tout de même configurer mon hosts sous windows, et Ffox a le même comportement et les mêmes fichiers de configuration.

#49 Le 30/08/2015, à 19:09

Compte supprimé

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

Je préfère le Debian de libc6 que mon Raspbian (Debian ARM pour Rapberry pi) hmm

    raspberrypi.local.53175 > w3.hackademix.net.https: Flags [.], cksum 0xf1ba (incorrect -> 0xeb0f), ack 1, win 229, options [nop,nop,TS val 554594 ecr 1703084306], length 0
19:55:13.884853 IP (tos 0x0, ttl 64, id 52550, offset 0, flags [DF], proto TCP (6), length 246)
    raspberrypi.local.53175 > w3.hackademix.net.https: Flags [P.], cksum 0xf27c (incorrect -> 0xdbd8), seq 1:195, ack 1, win 229, options [nop,nop,TS val 554595 ecr 1703084306], length 194
19:55:14.039792 IP (tos 0x0, ttl 47, id 3028, offset 0, flags [DF], proto TCP (6), length 52)
    w3.hackademix.net.https > raspberrypi.local.53175: Flags [.], cksum 0xea1f (correct), ack 195, win 235, options [nop,nop,TS val 1703084345 ecr 554595], length 0
19:55:14.041133 IP (tos 0x0, ttl 47, id 3029, offset 0, flags [DF], proto TCP (6), length 1500)
    w3.hackademix.net.https > raspberrypi.local.53175: Flags [.], cksum 0x09e0 (correct), seq 1:1449, ack 195, win 235, options [nop,nop,TS val 1703084345 ecr 554595], length 1448
19:55:14.041292 IP (tos 0x0, ttl 64, id 52551, offset 0, flags [DF], proto TCP (6), length 52)
    raspberrypi.local.53175 > w3.hackademix.net.https: Flags [.], cksum 0xf1ba (incorrect -> 0xe458), ack 1449, win 251, options [nop,nop,TS val 554610 ecr 1703084345], length 0
19:55:14.041613 IP (tos 0x0, ttl 47, id 3030, offset 0, flags [DF], proto TCP (6), length 1500)
    w3.hackademix.net.https > raspberrypi.local.53175: Flags [.], cksum 0x436f (correct), seq 1449:2897, ack 195, win 235, options [nop,nop,TS val 1703084345 ecr 554595], length 1448
19:55:14.041751 IP (tos 0x0, ttl 64, id 52552, offset 0, flags [DF], proto TCP (6), length 52)
    raspberrypi.local.53175 > w3.hackademix.net.https: Flags [.], cksum 0xf1ba (incorrect -> 0xde99), ack 2897, win 274, options [nop,nop,TS val 554610 ecr 1703084345], length 0
19:55:14.041990 IP (tos 0x0, ttl 47, id 3031, offset 0, flags [DF], proto TCP (6), length 1252)
    w3.hackademix.net.https > raspberrypi.local.53175: Flags [P.], cksum 0x9a0b (correct), seq 2897:4097, ack 195, win 235, options [nop,nop,TS val 1703084345 ecr 554595], length 1200
19:55:18.262133 IP (tos 0x0, ttl 64, id 19528, offset 0, flags [DF], proto UDP (17), length 73)
    raspberrypi.local.43714 > www.routerlogin.com.domain: 58131+ PTR? 196.158.195.69.in-addr.arpa. (45)
19:55:18.552263 IP (tos 0x0, ttl 64, id 19543, offset 0, flags [DF], proto UDP (17), length 64)
    raspberrypi.local.51023 > www.routerlogin.com.domain: 21172+ A? addons.mozilla.org. (36)
19:55:18.583117 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 202)
    www.routerlogin.com.domain > raspberrypi.local.51023: 21172 2/4/0 addons.mozilla.org. CNAME addons.dynect.mozilla.net., addons.dynect.mozilla.net. A 63.245.216.132 (174)
19:55:18.614347 IP (tos 0x0, ttl 64, id 24224, offset 0, flags [DF], proto TCP (6), length 60)
    raspberrypi.local.48536 > gcy86-1-78-212-132-53.fbx.proxad.net.http: Flags [s], cksum 0xe044 (incorrect -> 0xcaf8), seq 3408210318, win 29200, options [mss 1460,sackOK,TS val 555068 ecr 0,nop,wscale 7], length 0
19:55:18.864337 IP (tos 0x0, ttl 64, id 10063, offset 0, flags [DF], proto TCP (6), length 60)
    raspberrypi.local.48537 > gcy86-1-78-212-132-53.fbx.proxad.net.http: Flags [s], cksum 0xe044 (incorrect -> 0xa95d), seq 3318763620, win 29200, options [mss 1460,sackOK,TS val 555093 ecr 0,nop,wscale 7], length 0

Ce n'est qu'un aperçu…

Je rêve ou mon Raspberry traficouille avec mon routeur par les plugins Mozilla ? (précision : le routeur fait DNS)

Je sors le couteau suisse de l'armée et je lis : w3.hackademix.net quelques positifs, d'autres négatifs.

Bon, l'heure d'aller manger…

Dernière modification par Compte supprimé (Le 30/08/2015, à 19:12)

#50 Le 30/08/2015, à 19:13

Compte anonymisé

Re : [Résolu ! \o/] Firefox : De quoi se mêle Amazon ?

libc6 tourne sous Iceweasel, ceci explique peut-être cela.