This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Clients not connecting to Captive Portal behind RED60 with bridge to VLAN

Hello,

We have a RED60 with several VLANs tagged. One of these VLANs is for external WiFi users.

The APX320's are managed in Sophos Central. The AP's management IP's are in a different VLAN so the AP cannot directly communicate with the client or vice versa.

The SSID has a password and bridges into the VLAN and Hotspot is enabled so client isolation is also automatically enabled.

The external users know the WiFi password for the SSID and the password for the Hotspot and we want them to agree to our rules of usage. Thats all.

The Problem is, the clients authenticate to the SSID and then are not redirected to the captive portal. If they try to access a website the request times out.

In packet capture on our firewall I see positive DNS requests for the websites, e.g. google.com but the devices do not seem to try to access any captive portal page.

I found this old thread, but I hope after 3 years, there is a fix or this is about an other issue..

Hotspot Captive Portal not working with VLAN tagging

Any hint for me what to look for?



This thread was automatically locked due to age.
Parents
  • This is what such a client does right when it connects to Guest WiFi and tries to access google
    192.0.0.1 = RED IP in this VLAN
    192.0.0.2 = Client IP in this VLAN received by DHCP Server on the RED/XG Firewall ant HQ.

    1	11:02:50,012432	EndpointMACAddress		ARP			62	Who has 192.0.0.1? Tell 192.0.0.2
    2	11:02:50,012432	EndpointMACAddress		ARP			58	Who has 192.0.0.1? Tell 192.0.0.2
    3	11:02:50,012440	RedMACAddress		ARP			44	192.0.0.1 is at RedMACAddress
    4	11:02:50,020323	192.0.0.2	192.0.0.1	DNS	60330	53	95	Standard query 0x704c A connectivitycheck.gstatic.com
    5	11:02:50,020323	192.0.0.2	192.0.0.1	DNS	60330	53	91	Standard query 0x704c A connectivitycheck.gstatic.com
    6	11:02:50,020389	192.0.0.1	192.0.0.2	DNS	53	60330	107	Standard query response 0x704c A connectivitycheck.gstatic.com A 216.58.206.3
    7	11:02:50,023867	EndpointMACAddress		ARP			62	Who has 192.0.0.1? Tell 192.0.0.2
    8	11:02:50,023867	EndpointMACAddress		ARP			58	Who has 192.0.0.1? Tell 192.0.0.2
    9	11:02:50,023873	RedMACAddress		ARP			44	192.0.0.1 is at RedMACAddress
    10	11:02:50,046589	192.0.0.2	192.0.0.1	DNS	22702	53	80	Standard query 0x59b5 A www.google.com
    11	11:02:50,046589	192.0.0.2	192.0.0.1	DNS	22702	53	76	Standard query 0x59b5 A www.google.com
    12	11:02:50,046687	192.0.0.1	192.0.0.2	DNS	53	22702	92	Standard query response 0x59b5 A www.google.com A 172.217.23.100
    13	11:02:50,072500	192.0.0.2	192.0.0.1	DNS	25713	53	108	Standard query 0xfd5a A epdg.epc.mnc001.mcc262.pub.3gppnetwork.org
    14	11:02:50,072500	192.0.0.2	192.0.0.1	DNS	25713	53	104	Standard query 0xfd5a A epdg.epc.mnc001.mcc262.pub.3gppnetwork.org
    15	11:02:50,072618	192.0.0.1	192.0.0.2	DNS	53	25713	200	Standard query response 0xfd5a A epdg.epc.mnc001.mcc262.pub.3gppnetwork.org A 109.237.187.225 A 109.237.187.129 A 109.237.187.130 A 109.237.187.226 A 109.237.187.131 A 109.237.187.227
    16	11:02:50,093047	192.0.0.2	192.0.0.1	DNS	16633	53	82	Standard query 0xeecc A mtalk.google.com
    17	11:02:50,093047	192.0.0.2	192.0.0.1	DNS	16633	53	78	Standard query 0xeecc A mtalk.google.com
    18	11:02:50,093147	192.0.0.1	192.0.0.2	DNS	53	16633	123	Standard query response 0xeecc A mtalk.google.com CNAME mobile-gtalk.l.google.com A 64.233.167.188
    19	11:02:50,164626	192.0.0.2	192.0.0.1	DNS	12922	53	87	Standard query 0x4b9a A alt8-mtalk.google.com
    20	11:02:50,164626	192.0.0.2	192.0.0.1	DNS	12922	53	83	Standard query 0x4b9a A alt8-mtalk.google.com
    21	11:02:50,179226	192.0.0.1	192.0.0.2	DNS	53	12922	134	Standard query response 0x4b9a A alt8-mtalk.google.com CNAME alt8.mobile-gtalk4.l.google.com A 173.194.201.188
    22	11:02:50,269530	192.0.0.2	192.0.0.1	DNS	56876	53	88	Standard query 0xd70b A mailserver.private-domain.com
    23	11:02:50,269530	192.0.0.2	192.0.0.1	DNS	56876	53	84	Standard query 0xd70b A mailserver.private-domain.com
    24	11:02:50,269612	192.0.0.1	192.0.0.2	DNS	53	56876	100	Standard query response 0xd70b A mailserver.private-domain.com A 10.0.0.2
    25	11:02:52,043077	192.0.0.2	192.0.0.1	DNS	57653	53	80	Standard query 0x0064 A www.google.com
    26	11:02:52,043077	192.0.0.2	192.0.0.1	DNS	57653	53	76	Standard query 0x0064 A www.google.com
    27	11:02:52,043150	192.0.0.1	192.0.0.2	DNS	53	57653	92	Standard query response 0x0064 A www.google.com A 172.217.23.100
    28	11:02:52,142603	192.0.0.2	192.0.0.1	DNS	39887	53	91	Standard query 0x0005 PTR 216.58.202.4.in-addr.arpa
    29	11:02:52,142603	192.0.0.2	192.0.0.1	DNS	39887	53	87	Standard query 0x0005 PTR 216.58.202.4.in-addr.arpa
    30	11:02:52,150914	192.0.0.2	192.0.0.1	DNS	58261	53	76	Server status request 0x0002 A google.com
    31	11:02:52,150914	192.0.0.2	192.0.0.1	DNS	58261	53	72	Server status request 0x0002 A google.com
    32	11:02:52,152396	192.0.0.2	192.0.0.1	DNS	51174	53	76	Standard query 0x0003 A google.com
    33	11:02:52,152396	192.0.0.2	192.0.0.1	DNS	51174	53	72	Standard query 0x0003 A google.com
    34	11:02:52,152469	192.0.0.1	192.0.0.2	DNS	53	51174	88	Standard query response 0x0003 A google.com A 216.58.206.14
    35	11:02:52,159359	192.0.0.2	192.0.0.1	DNS	49458	53	136	Standard query 0x0007 A www.goooooooooooooooooooooooooooooooooooooooooooooooooooooooooogle.com
    36	11:02:52,159359	192.0.0.2	192.0.0.1	DNS	49458	53	132	Standard query 0x0007 A www.goooooooooooooooooooooooooooooooooooooooooooooooooooooooooogle.com
    37	11:02:52,161168	192.0.0.2	192.0.0.1	DNS	43309	53	77	Standard query 0x0006 A *google.com
    38	11:02:52,161168	192.0.0.2	192.0.0.1	DNS	43309	53	73	Standard query 0x0006 A *google.com
    39	11:02:52,161444	192.0.0.2	192.0.0.1	DNS	36599	53	76	Standard query 0x0001 A google.com
    40	11:02:52,161444	192.0.0.2	192.0.0.1	DNS	36599	53	72	Standard query 0x0001 A google.com
    41	11:02:52,161474	192.0.0.1	192.0.0.2	DNS	53	36599	88	Standard query response 0x0001 A google.com A 216.58.206.14
    42	11:02:52,163080	192.0.0.2	192.0.0.1	DNS	44306	53	76	Standard query 0x0008 A GOOGLE.COM
    43	11:02:52,163080	192.0.0.2	192.0.0.1	DNS	44306	53	72	Standard query 0x0008 A GOOGLE.COM
    44	11:02:52,163110	192.0.0.1	192.0.0.2	DNS	53	44306	88	Standard query response 0x0008 A GOOGLE.COM A 216.58.206.14
    45	11:02:52,163477	192.0.0.2	192.0.0.1	DNS	35813	53	76	Standard query 0x0004 A google.com
    46	11:02:52,163477	192.0.0.2	192.0.0.1	DNS	35813	53	72	Standard query 0x0004 A google.com
    47	11:02:52,166128	192.0.0.1	192.0.0.2	DNS	53	43309	73	Standard query response 0x0006 No such name A *google.com
    48	11:02:52,172443	192.0.0.2	192.0.0.1	DNS	33982	53	84	Inverse query 0x000a A
    49	11:02:52,172443	192.0.0.2	192.0.0.1	DNS	33982	53	80	Inverse query 0x000a A
    50	11:02:52,178844	192.0.0.2	192.0.0.1	DNS	58322	53	84	Inverse query 0x000b A
    51	11:02:52,178844	192.0.0.2	192.0.0.1	DNS	58322	53	80	Inverse query 0x000b A
    52	11:02:52,189192	192.0.0.2	192.0.0.1	DNS	49071	53	99	Standard query 0x000c A google.com OPT
    53	11:02:52,189192	192.0.0.2	192.0.0.1	DNS	49071	53	95	Standard query 0x000c A google.com OPT
    54	11:02:52,189233	192.0.0.1	192.0.0.2	DNS	53	49071	88	Standard query response 0x000c A google.com A 216.58.206.14
    55	11:02:52,195461	192.0.0.2	192.0.0.1	DNS	58139	53	99	Standard query 0x000e A google.com[Malformed Packet]
    56	11:02:52,195461	192.0.0.2	192.0.0.1	DNS	58139	53	95	Standard query 0x000e A google.com[Malformed Packet]
    57	11:02:52,195508	192.0.0.1	192.0.0.2	DNS	53	58139	88	Standard query response 0x000e A google.com A 216.58.206.14
    58	11:02:52,198834	192.0.0.2	192.0.0.1	DNS	47435	53	122	Standard query 0x000d A google.com OPT OPT
    59	11:02:52,198834	192.0.0.2	192.0.0.1	DNS	47435	53	118	Standard query 0x000d A google.com OPT OPT
    60	11:02:52,198878	192.0.0.1	192.0.0.2	DNS	53	47435	88	Standard query response 0x000d A google.com A 216.58.206.14
    61	11:02:52,215629	192.0.0.2	192.0.0.1	DNS	59206	53	99	Standard query 0x000f A google.com OPT
    62	11:02:52,215629	192.0.0.2	192.0.0.1	DNS	59206	53	95	Standard query 0x000f A google.com OPT
    63	11:02:52,215686	192.0.0.1	192.0.0.2	DNS	53	59206	88	Standard query response 0x000f A google.com A 216.58.206.14
    64	11:02:52,223794	192.0.0.2	192.0.0.1	DNS	41454	53	82	Standard query 0x0011 A google.com.onion
    65	11:02:52,223794	192.0.0.2	192.0.0.1	DNS	41454	53	78	Standard query 0x0011 A google.com.onion
    66	11:02:52,223841	192.0.0.1	192.0.0.2	DNS	53	41454	78	Standard query response 0x0011 No such name A google.com.onion
    67	11:02:52,227597	192.0.0.2	192.0.0.1	DNS	57004	53	76	Standard query 0x0012 NS google.com
    68	11:02:52,227597	192.0.0.2	192.0.0.1	DNS	57004	53	72	Standard query 0x0012 NS google.com
    69	11:02:52,227645	192.0.0.1	192.0.0.2	DNS	53	57004	144	Standard query response 0x0012 NS google.com NS ns1.google.com NS ns3.google.com NS ns2.google.com NS ns4.google.com
    70	11:02:52,253288	192.0.0.2	192.0.0.1	DNS	35484	53	76	Standard query 0x0013 SOA google.com
    71	11:02:52,253288	192.0.0.2	192.0.0.1	DNS	35484	53	72	Standard query 0x0013 SOA google.com
    72	11:02:52,258166	192.0.0.2	192.0.0.1	DNS	37846	53	76	Standard query 0x0014 CNAME google.com
    73	11:02:52,258166	192.0.0.2	192.0.0.1	DNS	37846	53	72	Standard query 0x0014 CNAME google.com
    74	11:02:52,258786	192.0.0.1	192.0.0.2	DNS	53	35484	122	Standard query response 0x0013 SOA google.com SOA ns1.google.com
    75	11:02:52,262099	192.0.0.2	192.0.0.1	DNS	50253	53	91	Standard query 0x0015 PTR 216.58.202.4.in-addr.arpa
    76	11:02:52,262099	192.0.0.2	192.0.0.1	DNS	50253	53	87	Standard query 0x0015 PTR 216.58.202.4.in-addr.arpa
    77	11:02:52,270813	192.0.0.1	192.0.0.2	DNS	53	37846	72	Standard query response 0x0014 CNAME google.com
    78	11:02:52,295445	192.0.0.2	192.0.0.1	DNS	40023	53	76	Standard query 0x0016 HINFO google.com
    79	11:02:52,295445	192.0.0.2	192.0.0.1	DNS	40023	53	72	Standard query 0x0016 HINFO google.com
    80	11:02:52,300672	192.0.0.1	192.0.0.2	DNS	53	40023	72	Standard query response 0x0016 HINFO google.com
    81	11:02:52,302836	192.0.0.2	192.0.0.1	DNS	60160	53	76	Standard query 0x0017 WKS google.com
    82	11:02:52,302836	192.0.0.2	192.0.0.1	DNS	60160	53	72	Standard query 0x0017 WKS google.com
    83	11:02:52,307581	192.0.0.1	192.0.0.2	DNS	53	60160	72	Standard query response 0x0017 WKS google.com
    84	11:02:52,336741	192.0.0.2	192.0.0.1	TCP	65000	53	62	65000 → 53 [SYN] Seq=0 Win=4000 Len=0
    85	11:02:52,336741	192.0.0.2	192.0.0.1	TCP	65000	53	58	[TCP Out-Of-Order] 65000 → 53 [SYN] Seq=0 Win=4000 Len=0
    86	11:02:52,336827	192.0.0.1	192.0.0.2	TCP	53	65000	60	53 → 65000 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460
    87	11:02:52,342017	192.0.0.2	192.0.0.1	DNS	34424	53	99	Standard query 0x0019 A google.com OPT
    88	11:02:52,342017	192.0.0.2	192.0.0.1	DNS	34424	53	95	Standard query 0x0019 A google.com OPT
    89	11:02:52,342064	192.0.0.1	192.0.0.2	DNS	53	34424	88	Standard query response 0x0019 A google.com A 216.58.206.14
    90	11:02:52,344900	192.0.0.2	192.0.0.1	TCP	65000	53	62	65000 → 53 [RST] Seq=1 Win=0 Len=0
    91	11:02:52,344900	192.0.0.2	192.0.0.1	TCP	65000	53	58	65000 → 53 [RST] Seq=1 Win=0 Len=0
    92	11:02:53,237399	192.0.0.1	192.0.0.2	DNS	53	50253	87	Standard query response 0x0015 Server failure PTR 216.58.202.4.in-addr.arpa
    93	11:02:55,174651	192.0.0.2	192.0.0.1	DNS	39887	53	91	Standard query 0x0005 PTR 216.58.202.4.in-addr.arpa
    94	11:02:55,174651	192.0.0.2	192.0.0.1	DNS	39887	53	87	Standard query 0x0005 PTR 216.58.202.4.in-addr.arpa
    95	11:02:55,174732	192.0.0.2	192.0.0.1	DNS	58261	53	76	Server status request 0x0002 A google.com
    96	11:02:55,174732	192.0.0.2	192.0.0.1	DNS	58261	53	72	Server status request 0x0002 A google.com
    97	11:02:55,175152	192.0.0.2	192.0.0.1	DNS	49458	53	136	Standard query 0x0007 A www.goooooooooooooooooooooooooooooooooooooooooooooooooooooooooogle.com
    98	11:02:55,175152	192.0.0.2	192.0.0.1	DNS	49458	53	132	Standard query 0x0007 A www.goooooooooooooooooooooooooooooooooooooooooooooooooooooooooogle.com
    99	11:02:55,175211	192.0.0.2	192.0.0.1	DNS	35813	53	76	Standard query 0x0004 A google.com
    100	11:02:55,175211	192.0.0.2	192.0.0.1	DNS	35813	53	72	Standard query 0x0004 A google.com
    101	11:02:55,194505	RedMACAddress		ARP			44	Who has 192.0.0.2? Tell 192.0.0.1
    102	11:02:55,204346	EndpointMACAddress		ARP			62	192.0.0.2 is at EndpointMACAddress
    103	11:02:55,204346	EndpointMACAddress		ARP			58	192.0.0.2 is at EndpointMACAddress
    104	11:02:55,204351	Sophos_57:7a:56		ARP			44	Unknown ARP opcode 0x00ca
    105	11:02:55,207268	192.0.0.2	192.0.0.1	DNS	58322	53	84	Inverse query 0x000b A
    106	11:02:55,207268	192.0.0.2	192.0.0.1	DNS	58322	53	80	Inverse query 0x000b A
    107	11:02:55,207564	192.0.0.2	192.0.0.1	DNS	33982	53	84	Inverse query 0x000a A
    108	11:02:55,207564	192.0.0.2	192.0.0.1	DNS	33982	53	80	Inverse query 0x000a A
    109	11:03:04,648725	192.168.40.135	192.0.0.2	ICMP	33904	500	442	Destination unreachable (Port unreachable)
    110	11:03:04,648725	192.168.40.135	192.0.0.2	ICMP	33904	500	438	Destination unreachable (Port unreachable)
    111	11:03:05,648694	192.168.40.135	192.0.0.2	ICMP	33904	500	442	Destination unreachable (Port unreachable)
    112	11:03:05,648694	192.168.40.135	192.0.0.2	ICMP	33904	500	438	Destination unreachable (Port unreachable)
    113	11:03:07,648956	192.168.40.135	192.0.0.2	ICMP	33904	500	442	Destination unreachable (Port unreachable)
    114	11:03:07,648956	192.168.40.135	192.0.0.2	ICMP	33904	500	438	Destination unreachable (Port unreachable)
    115	11:03:10,033201	192.0.0.2	192.0.0.1	DNS	28849	53	80	Standard query 0xbcbc A www.google.com
    116	11:03:10,033201	192.0.0.2	192.0.0.1	DNS	28849	53	76	Standard query 0xbcbc A www.google.com
    117	11:03:10,033311	192.0.0.1	192.0.0.2	DNS	53	28849	92	Standard query response 0xbcbc A www.google.com A 172.217.23.100
    118	11:03:10,509303	192.0.0.2	192.0.0.1	DNS	45070	53	85	Standard query 0x0c37 A app-measurement.com
    119	11:03:10,509303	192.0.0.2	192.0.0.1	DNS	45070	53	81	Standard query 0x0c37 A app-measurement.com
    120	11:03:10,509371	192.0.0.1	192.0.0.2	DNS	53	45070	97	Standard query response 0x0c37 A app-measurement.com A 172.217.16.174
    121	11:03:11,041865	192.0.0.2	192.0.0.1	DNS	52896	53	80	Standard query 0x09ce A www.google.com
    122	11:03:11,041865	192.0.0.2	192.0.0.1	DNS	52896	53	76	Standard query 0x09ce A www.google.com
    123	11:03:11,041935	192.0.0.1	192.0.0.2	DNS	53	52896	92	Standard query response 0x09ce A www.google.com A 172.217.23.100
    124	11:03:11,060598	192.168.40.135	192.0.0.2	ICMP	41987	443	596	Destination unreachable (Port unreachable)
    125	11:03:11,060598	192.168.40.135	192.0.0.2	ICMP	41987	443	592	Destination unreachable (Port unreachable)
    126	11:03:11,212624	192.168.40.135	192.0.0.2	ICMP	41987	443	596	Destination unreachable (Port unreachable)
    127	11:03:11,212624	192.168.40.135	192.0.0.2	ICMP	41987	443	592	Destination unreachable (Port unreachable)
    128	11:03:11,513061	192.168.40.135	192.0.0.2	ICMP	41987	443	596	Destination unreachable (Port unreachable)
    129	11:03:11,513061	192.168.40.135	192.0.0.2	ICMP	41987	443	592	Destination unreachable (Port unreachable)
    130	11:03:11,644263	192.168.40.135	192.0.0.2	ICMP	33904	500	442	Destination unreachable (Port unreachable)
    131	11:03:11,644263	192.168.40.135	192.0.0.2	ICMP	33904	500	438	Destination unreachable (Port unreachable)
    132	11:03:12,048461	192.0.0.2	192.0.0.1	DNS	2277	53	85	Standard query 0x5450 A play.googleapis.com
    133	11:03:12,048461	192.0.0.2	192.0.0.1	DNS	2277	53	81	Standard query 0x5450 A play.googleapis.com
    134	11:03:12,075048	192.0.0.1	192.0.0.2	DNS	53	2277	97	Standard query response 0x5450 A play.googleapis.com A 172.217.22.106
    135	11:03:12,114172	192.168.40.135	192.0.0.2	ICMP	41987	443	596	Destination unreachable (Port unreachable)
    136	11:03:12,114172	192.168.40.135	192.0.0.2	ICMP	41987	443	592	Destination unreachable (Port unreachable)
    137	11:03:13,192053	EndpointMACAddress		ARP			62	Who has 192.0.0.1? Tell 192.0.0.2
    138	11:03:13,192053	EndpointMACAddress		ARP			58	Who has 192.0.0.1? Tell 192.0.0.2
    139	11:03:13,192061	RedMACAddress		ARP			44	192.0.0.1 is at RedMACAddress
    140	11:03:13,314519	192.168.40.135	192.0.0.2	ICMP	41987	443	596	Destination unreachable (Port unreachable)
    141	11:03:13,314519	192.168.40.135	192.0.0.2	ICMP	41987	443	592	Destination unreachable (Port unreachable)
    142	11:03:14,737135	192.168.40.135	192.0.0.2	ICMP	38360	500	442	Destination unreachable (Port unreachable)
    143	11:03:14,737135	192.168.40.135	192.0.0.2	ICMP	38360	500	438	Destination unreachable (Port unreachable)
    144	11:03:15,067341	192.168.40.135	192.0.0.2	ICMP	41987	443	140	Destination unreachable (Port unreachable)
    145	11:03:15,067341	192.168.40.135	192.0.0.2	ICMP	41987	443	136	Destination unreachable (Port unreachable)
    146	11:03:15,074931	192.168.40.135	192.0.0.2	ICMP	47369	443	596	Destination unreachable (Port unreachable)
    147	11:03:15,074931	192.168.40.135	192.0.0.2	ICMP	47369	443	592	Destination unreachable (Port unreachable)
    148	11:03:15,226554	192.168.40.135	192.0.0.2	ICMP	47369	443	596	Destination unreachable (Port unreachable)
    149	11:03:15,226554	192.168.40.135	192.0.0.2	ICMP	47369	443	592	Destination unreachable (Port unreachable)
    150	11:03:16,135065	192.168.40.135	192.0.0.2	ICMP	47369	443	596	Destination unreachable (Port unreachable)
    151	11:03:16,135065	192.168.40.135	192.0.0.2	ICMP	47369	443	592	Destination unreachable (Port unreachable)
    152	11:03:16,697728	192.0.0.2	192.0.0.1	DNS	55469	53	95	Standard query 0xb64b A clientservices.googleapis.com
    153	11:03:16,697728	192.0.0.2	192.0.0.1	DNS	55469	53	91	Standard query 0xb64b A clientservices.googleapis.com
    154	11:03:16,697803	192.0.0.1	192.0.0.2	DNS	53	55469	107	Standard query response 0xb64b A clientservices.googleapis.com A 216.58.212.131
    155	11:03:16,864277	192.0.0.2	192.0.0.1	DNS	14921	53	85	Standard query 0x879e A accounts.google.com
    156	11:03:16,864277	192.0.0.2	192.0.0.1	DNS	14921	53	81	Standard query 0x879e A accounts.google.com
    157	11:03:16,865834	192.0.0.1	192.0.0.2	DNS	53	14921	97	Standard query response 0x879e A accounts.google.com A 172.217.22.77
    158	11:03:16,950818	192.0.0.2	192.0.0.1	DNS	6753	53	96	Standard query 0x5a42 A offlinepages-pa.googleapis.com
    159	11:03:16,950818	192.0.0.2	192.0.0.1	DNS	6753	53	92	Standard query 0x5a42 A offlinepages-pa.googleapis.com
    160	11:03:16,964748	192.0.0.1	192.0.0.2	DNS	53	6753	108	Standard query response 0x5a42 A offlinepages-pa.googleapis.com A 142.250.74.202
    161	11:03:17,335119	192.168.40.135	192.0.0.2	ICMP	47369	443	596	Destination unreachable (Port unreachable)
    162	11:03:17,335119	192.168.40.135	192.0.0.2	ICMP	47369	443	592	Destination unreachable (Port unreachable)
    163	11:03:19,118517	192.168.40.135	192.0.0.2	ICMP	47369	443	140	Destination unreachable (Port unreachable)
    164	11:03:19,118517	192.168.40.135	192.0.0.2	ICMP	47369	443	136	Destination unreachable (Port unreachable)
    165	11:03:19,118701	192.168.40.135	192.0.0.2	ICMP	51578	443	596	Destination unreachable (Port unreachable)
    166	11:03:19,118701	192.168.40.135	192.0.0.2	ICMP	51578	443	592	Destination unreachable (Port unreachable)
    167	11:03:20,135508	192.168.40.135	192.0.0.2	ICMP	51578	443	596	Destination unreachable (Port unreachable)
    168	11:03:20,135508	192.168.40.135	192.0.0.2	ICMP	51578	443	592	Destination unreachable (Port unreachable)
    169	11:03:21,343013	192.168.40.135	192.0.0.2	ICMP	51578	443	596	Destination unreachable (Port unreachable)
    170	11:03:21,343013	192.168.40.135	192.0.0.2	ICMP	51578	443	592	Destination unreachable (Port unreachable)
    171	11:03:23,088692	192.168.40.135	192.0.0.2	ICMP	51578	443	140	Destination unreachable (Port unreachable)
    172	11:03:23,088692	192.168.40.135	192.0.0.2	ICMP	51578	443	136	Destination unreachable (Port unreachable)
    173	11:03:23,104349	192.168.40.135	192.0.0.2	ICMP	47622	443	596	Destination unreachable (Port unreachable)
    174	11:03:23,104349	192.168.40.135	192.0.0.2	ICMP	47622	443	592	Destination unreachable (Port unreachable)

Reply
  • This is what such a client does right when it connects to Guest WiFi and tries to access google
    192.0.0.1 = RED IP in this VLAN
    192.0.0.2 = Client IP in this VLAN received by DHCP Server on the RED/XG Firewall ant HQ.

    1	11:02:50,012432	EndpointMACAddress		ARP			62	Who has 192.0.0.1? Tell 192.0.0.2
    2	11:02:50,012432	EndpointMACAddress		ARP			58	Who has 192.0.0.1? Tell 192.0.0.2
    3	11:02:50,012440	RedMACAddress		ARP			44	192.0.0.1 is at RedMACAddress
    4	11:02:50,020323	192.0.0.2	192.0.0.1	DNS	60330	53	95	Standard query 0x704c A connectivitycheck.gstatic.com
    5	11:02:50,020323	192.0.0.2	192.0.0.1	DNS	60330	53	91	Standard query 0x704c A connectivitycheck.gstatic.com
    6	11:02:50,020389	192.0.0.1	192.0.0.2	DNS	53	60330	107	Standard query response 0x704c A connectivitycheck.gstatic.com A 216.58.206.3
    7	11:02:50,023867	EndpointMACAddress		ARP			62	Who has 192.0.0.1? Tell 192.0.0.2
    8	11:02:50,023867	EndpointMACAddress		ARP			58	Who has 192.0.0.1? Tell 192.0.0.2
    9	11:02:50,023873	RedMACAddress		ARP			44	192.0.0.1 is at RedMACAddress
    10	11:02:50,046589	192.0.0.2	192.0.0.1	DNS	22702	53	80	Standard query 0x59b5 A www.google.com
    11	11:02:50,046589	192.0.0.2	192.0.0.1	DNS	22702	53	76	Standard query 0x59b5 A www.google.com
    12	11:02:50,046687	192.0.0.1	192.0.0.2	DNS	53	22702	92	Standard query response 0x59b5 A www.google.com A 172.217.23.100
    13	11:02:50,072500	192.0.0.2	192.0.0.1	DNS	25713	53	108	Standard query 0xfd5a A epdg.epc.mnc001.mcc262.pub.3gppnetwork.org
    14	11:02:50,072500	192.0.0.2	192.0.0.1	DNS	25713	53	104	Standard query 0xfd5a A epdg.epc.mnc001.mcc262.pub.3gppnetwork.org
    15	11:02:50,072618	192.0.0.1	192.0.0.2	DNS	53	25713	200	Standard query response 0xfd5a A epdg.epc.mnc001.mcc262.pub.3gppnetwork.org A 109.237.187.225 A 109.237.187.129 A 109.237.187.130 A 109.237.187.226 A 109.237.187.131 A 109.237.187.227
    16	11:02:50,093047	192.0.0.2	192.0.0.1	DNS	16633	53	82	Standard query 0xeecc A mtalk.google.com
    17	11:02:50,093047	192.0.0.2	192.0.0.1	DNS	16633	53	78	Standard query 0xeecc A mtalk.google.com
    18	11:02:50,093147	192.0.0.1	192.0.0.2	DNS	53	16633	123	Standard query response 0xeecc A mtalk.google.com CNAME mobile-gtalk.l.google.com A 64.233.167.188
    19	11:02:50,164626	192.0.0.2	192.0.0.1	DNS	12922	53	87	Standard query 0x4b9a A alt8-mtalk.google.com
    20	11:02:50,164626	192.0.0.2	192.0.0.1	DNS	12922	53	83	Standard query 0x4b9a A alt8-mtalk.google.com
    21	11:02:50,179226	192.0.0.1	192.0.0.2	DNS	53	12922	134	Standard query response 0x4b9a A alt8-mtalk.google.com CNAME alt8.mobile-gtalk4.l.google.com A 173.194.201.188
    22	11:02:50,269530	192.0.0.2	192.0.0.1	DNS	56876	53	88	Standard query 0xd70b A mailserver.private-domain.com
    23	11:02:50,269530	192.0.0.2	192.0.0.1	DNS	56876	53	84	Standard query 0xd70b A mailserver.private-domain.com
    24	11:02:50,269612	192.0.0.1	192.0.0.2	DNS	53	56876	100	Standard query response 0xd70b A mailserver.private-domain.com A 10.0.0.2
    25	11:02:52,043077	192.0.0.2	192.0.0.1	DNS	57653	53	80	Standard query 0x0064 A www.google.com
    26	11:02:52,043077	192.0.0.2	192.0.0.1	DNS	57653	53	76	Standard query 0x0064 A www.google.com
    27	11:02:52,043150	192.0.0.1	192.0.0.2	DNS	53	57653	92	Standard query response 0x0064 A www.google.com A 172.217.23.100
    28	11:02:52,142603	192.0.0.2	192.0.0.1	DNS	39887	53	91	Standard query 0x0005 PTR 216.58.202.4.in-addr.arpa
    29	11:02:52,142603	192.0.0.2	192.0.0.1	DNS	39887	53	87	Standard query 0x0005 PTR 216.58.202.4.in-addr.arpa
    30	11:02:52,150914	192.0.0.2	192.0.0.1	DNS	58261	53	76	Server status request 0x0002 A google.com
    31	11:02:52,150914	192.0.0.2	192.0.0.1	DNS	58261	53	72	Server status request 0x0002 A google.com
    32	11:02:52,152396	192.0.0.2	192.0.0.1	DNS	51174	53	76	Standard query 0x0003 A google.com
    33	11:02:52,152396	192.0.0.2	192.0.0.1	DNS	51174	53	72	Standard query 0x0003 A google.com
    34	11:02:52,152469	192.0.0.1	192.0.0.2	DNS	53	51174	88	Standard query response 0x0003 A google.com A 216.58.206.14
    35	11:02:52,159359	192.0.0.2	192.0.0.1	DNS	49458	53	136	Standard query 0x0007 A www.goooooooooooooooooooooooooooooooooooooooooooooooooooooooooogle.com
    36	11:02:52,159359	192.0.0.2	192.0.0.1	DNS	49458	53	132	Standard query 0x0007 A www.goooooooooooooooooooooooooooooooooooooooooooooooooooooooooogle.com
    37	11:02:52,161168	192.0.0.2	192.0.0.1	DNS	43309	53	77	Standard query 0x0006 A *google.com
    38	11:02:52,161168	192.0.0.2	192.0.0.1	DNS	43309	53	73	Standard query 0x0006 A *google.com
    39	11:02:52,161444	192.0.0.2	192.0.0.1	DNS	36599	53	76	Standard query 0x0001 A google.com
    40	11:02:52,161444	192.0.0.2	192.0.0.1	DNS	36599	53	72	Standard query 0x0001 A google.com
    41	11:02:52,161474	192.0.0.1	192.0.0.2	DNS	53	36599	88	Standard query response 0x0001 A google.com A 216.58.206.14
    42	11:02:52,163080	192.0.0.2	192.0.0.1	DNS	44306	53	76	Standard query 0x0008 A GOOGLE.COM
    43	11:02:52,163080	192.0.0.2	192.0.0.1	DNS	44306	53	72	Standard query 0x0008 A GOOGLE.COM
    44	11:02:52,163110	192.0.0.1	192.0.0.2	DNS	53	44306	88	Standard query response 0x0008 A GOOGLE.COM A 216.58.206.14
    45	11:02:52,163477	192.0.0.2	192.0.0.1	DNS	35813	53	76	Standard query 0x0004 A google.com
    46	11:02:52,163477	192.0.0.2	192.0.0.1	DNS	35813	53	72	Standard query 0x0004 A google.com
    47	11:02:52,166128	192.0.0.1	192.0.0.2	DNS	53	43309	73	Standard query response 0x0006 No such name A *google.com
    48	11:02:52,172443	192.0.0.2	192.0.0.1	DNS	33982	53	84	Inverse query 0x000a A
    49	11:02:52,172443	192.0.0.2	192.0.0.1	DNS	33982	53	80	Inverse query 0x000a A
    50	11:02:52,178844	192.0.0.2	192.0.0.1	DNS	58322	53	84	Inverse query 0x000b A
    51	11:02:52,178844	192.0.0.2	192.0.0.1	DNS	58322	53	80	Inverse query 0x000b A
    52	11:02:52,189192	192.0.0.2	192.0.0.1	DNS	49071	53	99	Standard query 0x000c A google.com OPT
    53	11:02:52,189192	192.0.0.2	192.0.0.1	DNS	49071	53	95	Standard query 0x000c A google.com OPT
    54	11:02:52,189233	192.0.0.1	192.0.0.2	DNS	53	49071	88	Standard query response 0x000c A google.com A 216.58.206.14
    55	11:02:52,195461	192.0.0.2	192.0.0.1	DNS	58139	53	99	Standard query 0x000e A google.com[Malformed Packet]
    56	11:02:52,195461	192.0.0.2	192.0.0.1	DNS	58139	53	95	Standard query 0x000e A google.com[Malformed Packet]
    57	11:02:52,195508	192.0.0.1	192.0.0.2	DNS	53	58139	88	Standard query response 0x000e A google.com A 216.58.206.14
    58	11:02:52,198834	192.0.0.2	192.0.0.1	DNS	47435	53	122	Standard query 0x000d A google.com OPT OPT
    59	11:02:52,198834	192.0.0.2	192.0.0.1	DNS	47435	53	118	Standard query 0x000d A google.com OPT OPT
    60	11:02:52,198878	192.0.0.1	192.0.0.2	DNS	53	47435	88	Standard query response 0x000d A google.com A 216.58.206.14
    61	11:02:52,215629	192.0.0.2	192.0.0.1	DNS	59206	53	99	Standard query 0x000f A google.com OPT
    62	11:02:52,215629	192.0.0.2	192.0.0.1	DNS	59206	53	95	Standard query 0x000f A google.com OPT
    63	11:02:52,215686	192.0.0.1	192.0.0.2	DNS	53	59206	88	Standard query response 0x000f A google.com A 216.58.206.14
    64	11:02:52,223794	192.0.0.2	192.0.0.1	DNS	41454	53	82	Standard query 0x0011 A google.com.onion
    65	11:02:52,223794	192.0.0.2	192.0.0.1	DNS	41454	53	78	Standard query 0x0011 A google.com.onion
    66	11:02:52,223841	192.0.0.1	192.0.0.2	DNS	53	41454	78	Standard query response 0x0011 No such name A google.com.onion
    67	11:02:52,227597	192.0.0.2	192.0.0.1	DNS	57004	53	76	Standard query 0x0012 NS google.com
    68	11:02:52,227597	192.0.0.2	192.0.0.1	DNS	57004	53	72	Standard query 0x0012 NS google.com
    69	11:02:52,227645	192.0.0.1	192.0.0.2	DNS	53	57004	144	Standard query response 0x0012 NS google.com NS ns1.google.com NS ns3.google.com NS ns2.google.com NS ns4.google.com
    70	11:02:52,253288	192.0.0.2	192.0.0.1	DNS	35484	53	76	Standard query 0x0013 SOA google.com
    71	11:02:52,253288	192.0.0.2	192.0.0.1	DNS	35484	53	72	Standard query 0x0013 SOA google.com
    72	11:02:52,258166	192.0.0.2	192.0.0.1	DNS	37846	53	76	Standard query 0x0014 CNAME google.com
    73	11:02:52,258166	192.0.0.2	192.0.0.1	DNS	37846	53	72	Standard query 0x0014 CNAME google.com
    74	11:02:52,258786	192.0.0.1	192.0.0.2	DNS	53	35484	122	Standard query response 0x0013 SOA google.com SOA ns1.google.com
    75	11:02:52,262099	192.0.0.2	192.0.0.1	DNS	50253	53	91	Standard query 0x0015 PTR 216.58.202.4.in-addr.arpa
    76	11:02:52,262099	192.0.0.2	192.0.0.1	DNS	50253	53	87	Standard query 0x0015 PTR 216.58.202.4.in-addr.arpa
    77	11:02:52,270813	192.0.0.1	192.0.0.2	DNS	53	37846	72	Standard query response 0x0014 CNAME google.com
    78	11:02:52,295445	192.0.0.2	192.0.0.1	DNS	40023	53	76	Standard query 0x0016 HINFO google.com
    79	11:02:52,295445	192.0.0.2	192.0.0.1	DNS	40023	53	72	Standard query 0x0016 HINFO google.com
    80	11:02:52,300672	192.0.0.1	192.0.0.2	DNS	53	40023	72	Standard query response 0x0016 HINFO google.com
    81	11:02:52,302836	192.0.0.2	192.0.0.1	DNS	60160	53	76	Standard query 0x0017 WKS google.com
    82	11:02:52,302836	192.0.0.2	192.0.0.1	DNS	60160	53	72	Standard query 0x0017 WKS google.com
    83	11:02:52,307581	192.0.0.1	192.0.0.2	DNS	53	60160	72	Standard query response 0x0017 WKS google.com
    84	11:02:52,336741	192.0.0.2	192.0.0.1	TCP	65000	53	62	65000 → 53 [SYN] Seq=0 Win=4000 Len=0
    85	11:02:52,336741	192.0.0.2	192.0.0.1	TCP	65000	53	58	[TCP Out-Of-Order] 65000 → 53 [SYN] Seq=0 Win=4000 Len=0
    86	11:02:52,336827	192.0.0.1	192.0.0.2	TCP	53	65000	60	53 → 65000 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460
    87	11:02:52,342017	192.0.0.2	192.0.0.1	DNS	34424	53	99	Standard query 0x0019 A google.com OPT
    88	11:02:52,342017	192.0.0.2	192.0.0.1	DNS	34424	53	95	Standard query 0x0019 A google.com OPT
    89	11:02:52,342064	192.0.0.1	192.0.0.2	DNS	53	34424	88	Standard query response 0x0019 A google.com A 216.58.206.14
    90	11:02:52,344900	192.0.0.2	192.0.0.1	TCP	65000	53	62	65000 → 53 [RST] Seq=1 Win=0 Len=0
    91	11:02:52,344900	192.0.0.2	192.0.0.1	TCP	65000	53	58	65000 → 53 [RST] Seq=1 Win=0 Len=0
    92	11:02:53,237399	192.0.0.1	192.0.0.2	DNS	53	50253	87	Standard query response 0x0015 Server failure PTR 216.58.202.4.in-addr.arpa
    93	11:02:55,174651	192.0.0.2	192.0.0.1	DNS	39887	53	91	Standard query 0x0005 PTR 216.58.202.4.in-addr.arpa
    94	11:02:55,174651	192.0.0.2	192.0.0.1	DNS	39887	53	87	Standard query 0x0005 PTR 216.58.202.4.in-addr.arpa
    95	11:02:55,174732	192.0.0.2	192.0.0.1	DNS	58261	53	76	Server status request 0x0002 A google.com
    96	11:02:55,174732	192.0.0.2	192.0.0.1	DNS	58261	53	72	Server status request 0x0002 A google.com
    97	11:02:55,175152	192.0.0.2	192.0.0.1	DNS	49458	53	136	Standard query 0x0007 A www.goooooooooooooooooooooooooooooooooooooooooooooooooooooooooogle.com
    98	11:02:55,175152	192.0.0.2	192.0.0.1	DNS	49458	53	132	Standard query 0x0007 A www.goooooooooooooooooooooooooooooooooooooooooooooooooooooooooogle.com
    99	11:02:55,175211	192.0.0.2	192.0.0.1	DNS	35813	53	76	Standard query 0x0004 A google.com
    100	11:02:55,175211	192.0.0.2	192.0.0.1	DNS	35813	53	72	Standard query 0x0004 A google.com
    101	11:02:55,194505	RedMACAddress		ARP			44	Who has 192.0.0.2? Tell 192.0.0.1
    102	11:02:55,204346	EndpointMACAddress		ARP			62	192.0.0.2 is at EndpointMACAddress
    103	11:02:55,204346	EndpointMACAddress		ARP			58	192.0.0.2 is at EndpointMACAddress
    104	11:02:55,204351	Sophos_57:7a:56		ARP			44	Unknown ARP opcode 0x00ca
    105	11:02:55,207268	192.0.0.2	192.0.0.1	DNS	58322	53	84	Inverse query 0x000b A
    106	11:02:55,207268	192.0.0.2	192.0.0.1	DNS	58322	53	80	Inverse query 0x000b A
    107	11:02:55,207564	192.0.0.2	192.0.0.1	DNS	33982	53	84	Inverse query 0x000a A
    108	11:02:55,207564	192.0.0.2	192.0.0.1	DNS	33982	53	80	Inverse query 0x000a A
    109	11:03:04,648725	192.168.40.135	192.0.0.2	ICMP	33904	500	442	Destination unreachable (Port unreachable)
    110	11:03:04,648725	192.168.40.135	192.0.0.2	ICMP	33904	500	438	Destination unreachable (Port unreachable)
    111	11:03:05,648694	192.168.40.135	192.0.0.2	ICMP	33904	500	442	Destination unreachable (Port unreachable)
    112	11:03:05,648694	192.168.40.135	192.0.0.2	ICMP	33904	500	438	Destination unreachable (Port unreachable)
    113	11:03:07,648956	192.168.40.135	192.0.0.2	ICMP	33904	500	442	Destination unreachable (Port unreachable)
    114	11:03:07,648956	192.168.40.135	192.0.0.2	ICMP	33904	500	438	Destination unreachable (Port unreachable)
    115	11:03:10,033201	192.0.0.2	192.0.0.1	DNS	28849	53	80	Standard query 0xbcbc A www.google.com
    116	11:03:10,033201	192.0.0.2	192.0.0.1	DNS	28849	53	76	Standard query 0xbcbc A www.google.com
    117	11:03:10,033311	192.0.0.1	192.0.0.2	DNS	53	28849	92	Standard query response 0xbcbc A www.google.com A 172.217.23.100
    118	11:03:10,509303	192.0.0.2	192.0.0.1	DNS	45070	53	85	Standard query 0x0c37 A app-measurement.com
    119	11:03:10,509303	192.0.0.2	192.0.0.1	DNS	45070	53	81	Standard query 0x0c37 A app-measurement.com
    120	11:03:10,509371	192.0.0.1	192.0.0.2	DNS	53	45070	97	Standard query response 0x0c37 A app-measurement.com A 172.217.16.174
    121	11:03:11,041865	192.0.0.2	192.0.0.1	DNS	52896	53	80	Standard query 0x09ce A www.google.com
    122	11:03:11,041865	192.0.0.2	192.0.0.1	DNS	52896	53	76	Standard query 0x09ce A www.google.com
    123	11:03:11,041935	192.0.0.1	192.0.0.2	DNS	53	52896	92	Standard query response 0x09ce A www.google.com A 172.217.23.100
    124	11:03:11,060598	192.168.40.135	192.0.0.2	ICMP	41987	443	596	Destination unreachable (Port unreachable)
    125	11:03:11,060598	192.168.40.135	192.0.0.2	ICMP	41987	443	592	Destination unreachable (Port unreachable)
    126	11:03:11,212624	192.168.40.135	192.0.0.2	ICMP	41987	443	596	Destination unreachable (Port unreachable)
    127	11:03:11,212624	192.168.40.135	192.0.0.2	ICMP	41987	443	592	Destination unreachable (Port unreachable)
    128	11:03:11,513061	192.168.40.135	192.0.0.2	ICMP	41987	443	596	Destination unreachable (Port unreachable)
    129	11:03:11,513061	192.168.40.135	192.0.0.2	ICMP	41987	443	592	Destination unreachable (Port unreachable)
    130	11:03:11,644263	192.168.40.135	192.0.0.2	ICMP	33904	500	442	Destination unreachable (Port unreachable)
    131	11:03:11,644263	192.168.40.135	192.0.0.2	ICMP	33904	500	438	Destination unreachable (Port unreachable)
    132	11:03:12,048461	192.0.0.2	192.0.0.1	DNS	2277	53	85	Standard query 0x5450 A play.googleapis.com
    133	11:03:12,048461	192.0.0.2	192.0.0.1	DNS	2277	53	81	Standard query 0x5450 A play.googleapis.com
    134	11:03:12,075048	192.0.0.1	192.0.0.2	DNS	53	2277	97	Standard query response 0x5450 A play.googleapis.com A 172.217.22.106
    135	11:03:12,114172	192.168.40.135	192.0.0.2	ICMP	41987	443	596	Destination unreachable (Port unreachable)
    136	11:03:12,114172	192.168.40.135	192.0.0.2	ICMP	41987	443	592	Destination unreachable (Port unreachable)
    137	11:03:13,192053	EndpointMACAddress		ARP			62	Who has 192.0.0.1? Tell 192.0.0.2
    138	11:03:13,192053	EndpointMACAddress		ARP			58	Who has 192.0.0.1? Tell 192.0.0.2
    139	11:03:13,192061	RedMACAddress		ARP			44	192.0.0.1 is at RedMACAddress
    140	11:03:13,314519	192.168.40.135	192.0.0.2	ICMP	41987	443	596	Destination unreachable (Port unreachable)
    141	11:03:13,314519	192.168.40.135	192.0.0.2	ICMP	41987	443	592	Destination unreachable (Port unreachable)
    142	11:03:14,737135	192.168.40.135	192.0.0.2	ICMP	38360	500	442	Destination unreachable (Port unreachable)
    143	11:03:14,737135	192.168.40.135	192.0.0.2	ICMP	38360	500	438	Destination unreachable (Port unreachable)
    144	11:03:15,067341	192.168.40.135	192.0.0.2	ICMP	41987	443	140	Destination unreachable (Port unreachable)
    145	11:03:15,067341	192.168.40.135	192.0.0.2	ICMP	41987	443	136	Destination unreachable (Port unreachable)
    146	11:03:15,074931	192.168.40.135	192.0.0.2	ICMP	47369	443	596	Destination unreachable (Port unreachable)
    147	11:03:15,074931	192.168.40.135	192.0.0.2	ICMP	47369	443	592	Destination unreachable (Port unreachable)
    148	11:03:15,226554	192.168.40.135	192.0.0.2	ICMP	47369	443	596	Destination unreachable (Port unreachable)
    149	11:03:15,226554	192.168.40.135	192.0.0.2	ICMP	47369	443	592	Destination unreachable (Port unreachable)
    150	11:03:16,135065	192.168.40.135	192.0.0.2	ICMP	47369	443	596	Destination unreachable (Port unreachable)
    151	11:03:16,135065	192.168.40.135	192.0.0.2	ICMP	47369	443	592	Destination unreachable (Port unreachable)
    152	11:03:16,697728	192.0.0.2	192.0.0.1	DNS	55469	53	95	Standard query 0xb64b A clientservices.googleapis.com
    153	11:03:16,697728	192.0.0.2	192.0.0.1	DNS	55469	53	91	Standard query 0xb64b A clientservices.googleapis.com
    154	11:03:16,697803	192.0.0.1	192.0.0.2	DNS	53	55469	107	Standard query response 0xb64b A clientservices.googleapis.com A 216.58.212.131
    155	11:03:16,864277	192.0.0.2	192.0.0.1	DNS	14921	53	85	Standard query 0x879e A accounts.google.com
    156	11:03:16,864277	192.0.0.2	192.0.0.1	DNS	14921	53	81	Standard query 0x879e A accounts.google.com
    157	11:03:16,865834	192.0.0.1	192.0.0.2	DNS	53	14921	97	Standard query response 0x879e A accounts.google.com A 172.217.22.77
    158	11:03:16,950818	192.0.0.2	192.0.0.1	DNS	6753	53	96	Standard query 0x5a42 A offlinepages-pa.googleapis.com
    159	11:03:16,950818	192.0.0.2	192.0.0.1	DNS	6753	53	92	Standard query 0x5a42 A offlinepages-pa.googleapis.com
    160	11:03:16,964748	192.0.0.1	192.0.0.2	DNS	53	6753	108	Standard query response 0x5a42 A offlinepages-pa.googleapis.com A 142.250.74.202
    161	11:03:17,335119	192.168.40.135	192.0.0.2	ICMP	47369	443	596	Destination unreachable (Port unreachable)
    162	11:03:17,335119	192.168.40.135	192.0.0.2	ICMP	47369	443	592	Destination unreachable (Port unreachable)
    163	11:03:19,118517	192.168.40.135	192.0.0.2	ICMP	47369	443	140	Destination unreachable (Port unreachable)
    164	11:03:19,118517	192.168.40.135	192.0.0.2	ICMP	47369	443	136	Destination unreachable (Port unreachable)
    165	11:03:19,118701	192.168.40.135	192.0.0.2	ICMP	51578	443	596	Destination unreachable (Port unreachable)
    166	11:03:19,118701	192.168.40.135	192.0.0.2	ICMP	51578	443	592	Destination unreachable (Port unreachable)
    167	11:03:20,135508	192.168.40.135	192.0.0.2	ICMP	51578	443	596	Destination unreachable (Port unreachable)
    168	11:03:20,135508	192.168.40.135	192.0.0.2	ICMP	51578	443	592	Destination unreachable (Port unreachable)
    169	11:03:21,343013	192.168.40.135	192.0.0.2	ICMP	51578	443	596	Destination unreachable (Port unreachable)
    170	11:03:21,343013	192.168.40.135	192.0.0.2	ICMP	51578	443	592	Destination unreachable (Port unreachable)
    171	11:03:23,088692	192.168.40.135	192.0.0.2	ICMP	51578	443	140	Destination unreachable (Port unreachable)
    172	11:03:23,088692	192.168.40.135	192.0.0.2	ICMP	51578	443	136	Destination unreachable (Port unreachable)
    173	11:03:23,104349	192.168.40.135	192.0.0.2	ICMP	47622	443	596	Destination unreachable (Port unreachable)
    174	11:03:23,104349	192.168.40.135	192.0.0.2	ICMP	47622	443	592	Destination unreachable (Port unreachable)

Children