Skip to content

请教下我运行的时候基本都是SYN是否是正常情况呢？ #102

Open
Open
请教下我运行的时候基本都是SYN是否是正常情况呢？#102

Description

@kankankankankankan
kankankankankankan
opened on Mar 17, 2026

你好大佬，请教下，我执行的时候基本都是SYN，不知道这个算正常么？

改ImmortalWrt是旁路由，挂载的，其他设备网关走的此设备，但现在我看日志只有SYN，没有其他网友的FAKE等日志，不知道这个算正常么？（执行-b 或者 -e -h都是同样的结果）

root@ImmortalWrt:~# head -n-0 /etc/openwrt_release /etc/openwrt_version /proc/version /proc/net/netfilter/nfnetlink
_queue
==> /etc/openwrt_release <==
DISTRIB_ID='ImmortalWrt'
DISTRIB_RELEASE='24.10.4'
DISTRIB_REVISION='r33602-e717d133ed6d'
DISTRIB_TARGET='x86/64'
DISTRIB_ARCH='x86_64'
DISTRIB_DESCRIPTION='ImmortalWrt 24.10.4 r33602-e717d133ed6d'
DISTRIB_TAINTS='no-all'

==> /etc/openwrt_version <==
r33602-e717d133ed6d

==> /proc/version <==
Linux version 6.6.110 (runner@runnervm46oaq) (x86_64-openwrt-linux-musl-gcc (OpenWrt GCC 13.3.0 r33602-e717d133ed6d) 13.3.0, GNU ld (GNU Binutils) 2.42) #0 SMP Mon Oct 27 14:10:17 2025

==> /proc/net/netfilter/nfnetlink_queue <==

root@ImmortalWrt:~# opkg info kernel
Package: kernel
Version: 6.6.110~a49e91af5d00d15128657d33d49ce7db-r1
Depends: libc
Status: install ok installed
Architecture: x86_64
Installed-Time: 1761574217

root@ImmortalWrt:~# opkg info kmod-nfnetlink-queue
Package: kmod-nfnetlink-queue
Version: 6.6.110-r1
Depends: kernel (= 6.6.110~a49e91af5d00d15128657d33d49ce7db-r1), kmod-nfnetlink
Status: install ok installed
Architecture: x86_64
Installed-Time: 1761574217

root@ImmortalWrt:~# iptables --version
iptables v1.8.10 (nf_tables)
root@ImmortalWrt:~#  uname -a
Linux ImmortalWrt 6.6.110 #0 SMP Mon Oct 27 14:10:17 2025 x86_64 GNU/Linux
root@ImmortalWrt:~# opkg list-installed | grep iptables
iptables-mod-extra - 1.8.10-r1
iptables-nft - 1.8.10-r1
root@ImmortalWrt:~# opkg info kernel^C

root@ImmortalWrt:~# /usr/bin/fakehttp -i eth0 -b /root/payload.bin 
2026-03-17 21:38:22 [src/mainfun.c:423] FakeHTTP version 1.0.0
2026-03-17 21:38:22 [src/mainfun.c:424] 
2026-03-17 21:38:22 [src/mainfun.c:425] FakeHTTP is free software licensed under the GPLv3.
2026-03-17 21:38:22 [src/mainfun.c:426] Distribution without the accompanying source code is not permitted.
2026-03-17 21:38:22 [src/mainfun.c:427] 
2026-03-17 21:38:22 [src/mainfun.c:428] Home page: https://github.com/MikeWang000000/FakeHTTP
2026-03-17 21:38:22 [src/mainfun.c:429] 
2026-03-17 21:38:22 [src/mainfun.c:496] listening on eth0, netfilter queue number 512...
2026-03-17 21:38:27 [src/rawsend.c:530] 112.46.240.74:443 <===SYN=== 192.168.124.10:9200
2026-03-17 21:38:28 [src/rawsend.c:530] 112.46.240.74:443 <===SYN=== 192.168.124.10:9205
2026-03-17 21:38:29 [src/rawsend.c:530] 91.108.56.152:443 <===SYN=== 192.168.124.10:9206
2026-03-17 21:38:29 [src/rawsend.c:530] 91.108.56.152:80 <===SYN=== 192.168.124.10:9207
2026-03-17 21:38:29 [src/rawsend.c:530] 23.210.216.92:443 <===SYN=== 192.168.124.10:9210
2026-03-17 21:38:30 [src/rawsend.c:530] 91.108.56.152:443 <===SYN=== 192.168.124.10:9212
2026-03-17 21:38:30 [src/rawsend.c:530] 91.108.56.152:80 <===SYN=== 192.168.124.10:9213
2026-03-17 21:38:31 [src/rawsend.c:530] 112.46.240.74:443 <===SYN=== 192.168.124.10:9217
2026-03-17 21:38:36 [src/rawsend.c:530] 111.13.118.92:443 <===SYN=== 192.168.124.10:9226
2026-03-17 21:38:36 [src/rawsend.c:530] 47.113.23.100:443 <===SYN=== 192.168.124.10:9227
2026-03-17 21:38:37 [src/rawsend.c:530] 112.46.240.74:443 <===SYN=== 192.168.124.10:9231
2026-03-17 21:38:37 [src/rawsend.c:530] 112.34.111.108:443 <===SYN=== 192.168.124.10:9233
2026-03-17 21:38:37 [src/rawsend.c:530] 112.46.240.74:443 <===SYN=== 192.168.124.10:9234
2026-03-17 21:38:38 [src/rawsend.c:530] 112.46.240.74:443 <===SYN=== 192.168.124.10:9236
2026-03-17 21:38:41 [src/rawsend.c:530] 112.46.240.74:443 <===SYN=== 192.168.124.10:9243
2026-03-17 21:38:44 [src/rawsend.c:540] 17.57.145.151:5223 <===(~)=== 192.168.124.11:52427
2026-03-17 21:38:44 [src/rawsend.c:540] 17.57.145.151:5223 <===(~)=== 192.168.124.11:52427
2026-03-17 21:38:45 [src/rawsend.c:540] 17.57.145.151:5223 <===(~)=== 192.168.124.11:52427
2026-03-17 21:38:45 [src/rawsend.c:530] 112.46.228.98:443 <===SYN=== 192.168.124.10:9262
2026-03-17 21:38:45 [src/rawsend.c:530] 112.46.228.96:443 <===SYN=== 192.168.124.10:9259
2026-03-17 21:38:45 [src/rawsend.c:530] 112.46.228.97:443 <===SYN=== 192.168.124.10:9260
2026-03-17 21:38:45 [src/rawsend.c:530] 112.46.228.110:443 <===SYN=== 192.168.124.10:9261
2026-03-17 21:38:45 [src/rawsend.c:530] 112.46.228.109:443 <===SYN=== 192.168.124.10:9263
2026-03-17 21:38:47 [src/rawsend.c:530] 142.250.197.138:443 <===SYN=== 192.168.124.11:50329
2026-03-17 21:38:47 [src/rawsend.c:530] 142.250.198.174:443 <===SYN=== 192.168.124.11:50330
2026-03-17 21:38:47 [src/rawsend.c:530] 112.46.240.74:443 <===SYN=== 192.168.124.10:9271
2026-03-17 21:38:47 [src/rawsend.c:530] 112.46.240.74:443 <===SYN=== 192.168.124.10:9272
2026-03-17 21:38:48 [src/rawsend.c:530] 112.46.240.74:443 <===SYN=== 192.168.124.10:9276
2026-03-17 21:38:48 [src/rawsend.c:530] 108.160.162.109:443 <===SYN=== 192.168.124.11:52465
2026-03-17 21:38:50 [src/rawsend.c:530] 112.46.228.97:443 <===SYN=== 192.168.124.10:9281
2026-03-17 21:38:50 [src/rawsend.c:530] 112.46.228.96:443 <===SYN=== 192.168.124.10:9285
2026-03-17 21:38:50 [src/rawsend.c:530] 112.46.228.98:443 <===SYN=== 192.168.124.10:9284
2026-03-17 21:38:50 [src/rawsend.c:530] 112.46.228.109:443 <===SYN=== 192.168.124.10:9283
2026-03-17 21:38:50 [src/rawsend.c:530] 112.46.228.110:443 <===SYN=== 192.168.124.10:9282
2026-03-17 21:38:51 [src/rawsend.c:530] 112.46.240.74:443 <===SYN=== 192.168.124.10:9287
2026-03-17 21:38:57 [src/rawsend.c:530] 112.46.240.74:443 <===SYN=== 192.168.124.10:9315
2026-03-17 21:38:57 [src/rawsend.c:530] 112.46.240.74:443 <===SYN=== 192.168.124.10:9317
2026-03-17 21:38:58 [src/rawsend.c:530] 112.46.240.74:443 <===SYN=== 192.168.124.10:9320
2026-03-17 21:38:59 [src/rawsend.c:530] 111.19.193.58:443 <===SYN=== 192.168.124.10:9325
2026-03-17 21:39:01 [src/rawsend.c:530] 112.46.240.74:443 <===SYN=== 192.168.124.10:9330
2026-03-17 21:39:03 [src/rawsend.c:530] 23.210.216.82:443 <===SYN=== 192.168.124.10:7591
2026-03-17 21:39:04 [src/rawsend.c:530] 17.57.145.152:5223 <===SYN=== 192.168.124.11:52466
2026-03-17 21:39:06 [src/rawsend.c:530] 17.57.145.151:5223 <===SYN=== 192.168.124.11:52467
2026-03-17 21:39:06 [src/rawsend.c:530] 17.57.145.151:5223 <===SYN=== 192.168.124.11:52467
2026-03-17 21:39:07 [src/rawsend.c:530] 17.57.145.151:5223 <===SYN=== 192.168.124.11:52467
2026-03-17 21:39:07 [src/rawsend.c:530] 112.46.240.55:443 <===SYN=== 192.168.124.10:5641
2026-03-17 21:39:07 [src/rawsend.c:530] 17.57.145.151:5223 <===SYN=== 192.168.124.11:52467
2026-03-17 21:39:07 [src/rawsend.c:530] 111.19.181.176:443 <===SYN=== 192.168.124.10:5643
2026-03-17 21:39:07 [src/rawsend.c:530] 111.19.181.176:443 <===SYN=== 192.168.124.10:5644
2026-03-17 21:39:07 [src/rawsend.c:530] 17.57.145.151:5223 <===SYN=== 192.168.124.11:52467
2026-03-17 21:39:07 [src/rawsend.c:530] 23.193.119.199:443 <===SYN=== 192.168.124.10:5645
2026-03-17 21:39:08 [src/rawsend.c:530] 17.57.145.151:5223 <===SYN=== 192.168.124.11:52467
2026-03-17 21:39:08 [src/rawsend.c:530] 111.19.181.176:443 <===SYN=== 192.168.124.10:5649
2026-03-17 21:39:09 [src/rawsend.c:540] 111.48.156.83:443 <===(~)=== 192.168.124.11:50141
2026-03-17 21:39:09 [src/rawsend.c:530] 111.19.138.36:443 <===SYN=== 192.168.124.11:52468
2026-03-17 21:39:10 [src/rawsend.c:530] 23.33.38.156:443 <===SYN=== 192.168.124.11:52469
2026-03-17 21:39:10 [src/rawsend.c:530] 23.33.38.156:443 <===SYN=== 192.168.124.11:52470
2026-03-17 21:39:10 [src/rawsend.c:530] 111.19.138.7:443 <===SYN=== 192.168.124.11:52471
2026-03-17 21:39:10 [src/rawsend.c:530] 112.46.59.213:443 <===SYN=== 192.168.124.11:52472
2026-03-17 21:39:10 [src/rawsend.c:530] 23.208.236.42:80 <===SYN=== 192.168.124.11:52473
2026-03-17 21:39:11 [src/rawsend.c:530] 111.19.181.176:443 <===SYN=== 192.168.124.10:5656
2026-03-17 21:39:11 [src/rawsend.c:530] 23.208.236.42:80 <===SYN=== 192.168.124.11:52474
2026-03-17 21:39:13 [src/rawsend.c:540] 111.48.156.83:443 <===(~)=== 192.168.124.11:50141
2026-03-17 21:39:13 [src/rawsend.c:540] 111.48.156.83:443 <===(~)=== 192.168.124.11:50141
2026-03-17 21:39:17 [src/rawsend.c:530] 111.19.181.176:443 <===SYN=== 192.168.124.10:13382
2026-03-17 21:39:17 [src/rawsend.c:530] 111.19.181.176:443 <===SYN=== 192.168.124.10:13384
2026-03-17 21:39:18 [src/rawsend.c:530] 111.19.181.194:443 <===SYN=== 192.168.124.10:13388
2026-03-17 21:39:20 [src/rawsend.c:530] 112.46.228.110:443 <===SYN=== 192.168.124.10:13398
2026-03-17 21:39:20 [src/rawsend.c:530] 112.46.228.97:443 <===SYN=== 192.168.124.10:13400
2026-03-17 21:39:20 [src/rawsend.c:530] 112.46.228.98:443 <===SYN=== 192.168.124.10:13399
2026-03-17 21:39:20 [src/rawsend.c:530] 112.46.228.96:443 <===SYN=== 192.168.124.10:13401
2026-03-17 21:39:20 [src/rawsend.c:530] 112.46.228.109:443 <===SYN=== 192.168.124.10:13402
2026-03-17 21:39:21 [src/rawsend.c:530] 111.19.181.194:443 <===SYN=== 192.168.124.10:13403

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions