23:07:23.166861 arp who-has 192.168.1.100 tell 192.168.1.195
23:07:23.167036 arp reply 192.168.1.100 is-at 00:0b:6a:cb:be:8d (oui Unknown)
23:07:23.167126 IP 192.168.1.195.58799 > 192.168.1.100.ssh: S 2275413703:2275413703(0) win 65535 <mss 1460,nop,wscale 8,nop,nop,timestamp 8178924 0>
23:07:23.247656 IP 192.168.1.195.49713 > m0n0wall.am-productions.biz.domain:  6495+ PTR? 100.1.168.192.in-addr.arpa. (44)
23:07:23.269748 IP m0n0wall.am-productions.biz.domain > 192.168.1.195.49713:  6495 NXDomain* 0/1/0 (112)
23:07:23.274694 IP 192.168.1.195.60722 > m0n0wall.am-productions.biz.domain:  6496+ PTR? 195.1.168.192.in-addr.arpa. (44)
23:07:23.409341 IP m0n0wall.am-productions.biz.domain > 192.168.1.195.60722:  6496 NXDomain* 0/1/0 (112)
23:07:24.405455 IP 192.168.1.195.50305 > m0n0wall.am-productions.biz.domain:  6497+ PTR? 1.1.168.192.in-addr.arpa. (42)
23:07:24.406815 IP m0n0wall.am-productions.biz.domain > 192.168.1.195.50305:  6497* 1/0/0 PTR[|domain]
23:07:26.162424 IP 192.168.1.195.58799 > 192.168.1.100.ssh: S 2275413703:2275413703(0) win 65535 <mss 1460,nop,wscale 8,nop,nop,timestamp 8179224 0>
23:07:29.362386 IP 192.168.1.195.58799 > 192.168.1.100.ssh: S 2275413703:2275413703(0) win 65535 <mss 1460,nop,wscale 8,nop,nop,timestamp 8179544 0>
23:07:32.562415 IP 192.168.1.195.58799 > 192.168.1.100.ssh: S 2275413703:2275413703(0) win 65535 <mss 1460>
23:07:35.762501 IP 192.168.1.195.58799 > 192.168.1.100.ssh: S 2275413703:2275413703(0) win 65535 <mss 1460>
23:07:38.962548 IP 192.168.1.195.58799 > 192.168.1.100.ssh: S 2275413703:2275413703(0) win 65535 <mss 1460>
23:07:45.162732 IP 192.168.1.195.58799 > 192.168.1.100.ssh: S 2275413703:2275413703(0) win 65535 <mss 1460>
23:07:57.362939 IP 192.168.1.195.58799 > 192.168.1.100.ssh: S 2275413703:2275413703(0) win 65535 <mss 1460>
23:07:59.742344 IP 192.168.1.190.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138)
23:08:00.405311 IP 192.168.1.195.58875 > m0n0wall.am-productions.biz.domain:  6498+ PTR? 255.1.168.192.in-addr.arpa. (44)
23:08:00.429433 IP m0n0wall.am-productions.biz.domain > 192.168.1.195.58875:  6498 NXDomain* 0/1/0 (112)
23:08:00.435831 IP 192.168.1.195.55362 > m0n0wall.am-productions.biz.domain:  6499+ PTR? 190.1.168.192.in-addr.arpa. (44)
23:08:00.557832 IP m0n0wall.am-productions.biz.domain > 192.168.1.195.55362:  6499 NXDomain* 0/1/0 (112)
23:08:21.563277 IP 192.168.1.195.58799 > 192.168.1.100.ssh: S 2275413703:2275413703(0) win 65535 <mss 1460>
23:08:38.001109 arp who-has 192.168.1.100 tell m0n0wall.am-productions.biz