Re: [CentOS] OT: what are all these probes from my firewall log????

2012-08-25 Thread Lamar Owen
On Saturday, August 18, 2012 11:01:26 AM fred smith wrote: On Sat, Aug 18, 2012 at 09:20:56AM -0500, Robert Nichols wrote: On 08/16/2012 11:06 PM, fred smith wrote: hmm... just did traceroute 10.21.72.1 and it comes back as being a system at my ISP. that doesn't seem right to me. they

Re: [CentOS] OT: what are all these probes from my firewall log????

2012-08-18 Thread Robert Nichols
On 08/16/2012 11:06 PM, fred smith wrote: On Thu, Aug 16, 2012 at 08:27:27PM -0700, John R Pierce wrote: On 08/16/12 7:01 PM, fred smith wrote: I'm getting a gazillion of these probes in my firewall logs. I don't understand what's going on here,... These all look like bootp requests from

Re: [CentOS] OT: what are all these probes from my firewall log????

2012-08-18 Thread fred smith
On Sat, Aug 18, 2012 at 09:20:56AM -0500, Robert Nichols wrote: On 08/16/2012 11:06 PM, fred smith wrote: On Thu, Aug 16, 2012 at 08:27:27PM -0700, John R Pierce wrote: On 08/16/12 7:01 PM, fred smith wrote: I'm getting a gazillion of these probes in my firewall logs. I don't understand

Re: [CentOS] OT: what are all these probes from my firewall log????

2012-08-18 Thread Robert Nichols
On 08/18/2012 10:01 AM, fred smith wrote: On Sat, Aug 18, 2012 at 09:20:56AM -0500, Robert Nichols wrote: Those are BOOTP responses from your ISP's DHCP server to clients requesting an IP address. They have to be broadcast because the client does not yet have an IP address. Go yell at

Re: [CentOS] OT: what are all these probes from my firewall log????

2012-08-17 Thread Keith Roberts
On Fri, 17 Aug 2012, fred smith wrote: *snip* hmm... just did traceroute 10.21.72.1 and it comes back as being a system at my ISP. that doesn't seem right to me. they shouldn't be broadcaasting such stuff, as far as I know, at least. Any other thoughts? Any network problems, I run Wireshark

Re: [CentOS] OT: what are all these probes from my firewall log????

2012-08-17 Thread John R Pierce
On 08/16/12 9:24 PM, Bobby wrote: On 08/17/2012 12:20 AM, John R Pierce wrote: the MAC address prefix on that DHCP thing is 00:23:EB which is Cisco... and yes, ISP's frequently use private IP space for internal gateway networks. they aren't routable on the public internet, they don't

Re: [CentOS] OT: what are all these probes from my firewall log????

2012-08-17 Thread Devin Reade
fred smith fre...@fcshome.stoneham.ma.us wrote: On Thu, Aug 16, 2012 at 09:20:52PM -0700, John R Pierce wrote: this is on your eth0 side, I'm assuming thats the WAN side of your firewall/gateway ?if so, then yes, I imagine its something at your ISP, you might ask them what these are.

Re: [CentOS] OT: what are all these probes from my firewall log????

2012-08-17 Thread fred smith
On Fri, Aug 17, 2012 at 09:18:01PM -0600, Devin Reade wrote: fred smith fre...@fcshome.stoneham.ma.us wrote: On Thu, Aug 16, 2012 at 09:20:52PM -0700, John R Pierce wrote: this is on your eth0 side, I'm assuming thats the WAN side of your firewall/gateway ?if so, then yes, I imagine

[CentOS] OT: what are all these probes from my firewall log????

2012-08-16 Thread fred smith
I'm getting a gazillion of these probes in my firewall logs. I don't understand what's going on here,... These all look like bootp requests from 10.21.72.1, to 255.255.255.255. there's certainly no 10.x.x.x here on this network, and I don't get the destination address... is it possible to send

Re: [CentOS] OT: what are all these probes from my firewall log????

2012-08-16 Thread John R Pierce
On 08/16/12 7:01 PM, fred smith wrote: I'm getting a gazillion of these probes in my firewall logs. I don't understand what's going on here,... These all look like bootp requests from 10.21.72.1, to 255.255.255.255. there's certainly no 10.x.x.x here on this network, and I don't get the

Re: [CentOS] OT: what are all these probes from my firewall log????

2012-08-16 Thread fred smith
On Thu, Aug 16, 2012 at 08:27:27PM -0700, John R Pierce wrote: On 08/16/12 7:01 PM, fred smith wrote: I'm getting a gazillion of these probes in my firewall logs. I don't understand what's going on here,... These all look like bootp requests from 10.21.72.1, to 255.255.255.255. there's

Re: [CentOS] OT: what are all these probes from my firewall log????

2012-08-16 Thread John R Pierce
On 08/16/12 9:06 PM, fred smith wrote: On Thu, Aug 16, 2012 at 08:27:27PM -0700, John R Pierce wrote: On 08/16/12 7:01 PM, fred smith wrote: I'm getting a gazillion of these probes in my firewall logs. I don't understand what's going on here,... These all look like bootp requests from

Re: [CentOS] OT: what are all these probes from my firewall log????

2012-08-16 Thread Bobby
On 08/17/2012 12:20 AM, John R Pierce wrote: the MAC address prefix on that DHCP thing is 00:23:EB which is Cisco... and yes, ISP's frequently use private IP space for internal gateway networks. they aren't routable on the public internet, they don't have to be, they are just used for

Re: [CentOS] OT: what are all these probes from my firewall log????

2012-08-16 Thread fred smith
On Thu, Aug 16, 2012 at 09:20:52PM -0700, John R Pierce wrote: On 08/16/12 9:06 PM, fred smith wrote: On Thu, Aug 16, 2012 at 08:27:27PM -0700, John R Pierce wrote: On 08/16/12 7:01 PM, fred smith wrote: I'm getting a gazillion of these probes in my firewall logs. I don't understand