I´d like to ask for help in understanding this tcpdump capture. Tcpdump is running on server 10.13.255.27 and received the packet:
root@server27 ~]# tcpdump -i eth0 dst host 10.13.255.26 and not src net 10.13.255.0/24 -nn -vv tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes 13:55:48.604841 IP (tos 0x0, ttl 58, id 52803, offset 0, flags [DF], proto TCP (6), length 1420) 10.19.13.152.48002 > 10.13.255.26.40650: Flags [.], cksum 0x13eb (correct), seq 4107760935:4107762315, ack 911518208, win 998, length 1380
10.19.13.152 is a server that reaches the net 10.13.255.0/24 through a vpn.
The question is why this packet was sent to 10.13.255.27? Both 26 and 27 are connected to a Summit200 switch at the same vlan and none of them are virtual.
Thanks in advance