1 | initial version |
The packets that seem out of range are all ICMP packets. Probably, the ICMP header contains a copy of the ICMP header of the packet that triggered the need for the ICMP reply, and that header copy contains an IP in the 10.192.240.x range in its Destination field. Look inside the ICMP data and I bet you'll see another IP header sitting inside.