Strange behavior for Macintosh agent 4.1.3.1

[Robert Spellman]

All of our clean access agents running on macintosh computers appear to be sending a udp packet to port 80 on computers that are the reverse of the computer's default gateway. For example, on my computer, my default gateway is 134.181.128.217. Using tcpdump, every 5 seconds, I see a packet with the destination address 217.128.181.134.

Here's the output from tcpdump for one exchange:




If I shutdown my agent, the traffic goes away.


Rob


begin:vcard
fn:Robert Spellman
n:Spellman;Robert
org:Bates College;Information and Library Services
adr;dom:;;110 Russell Street;Lewiston;Maine;04240
email;internet:[EMAIL PROTECTED]
title:Assistant Director of Network Services
tel;work:207-786-6422
note:01000111011011110010000001010010011001010110010001010011011011110111100000100001
x-mozilla-html:TRUE
url:http://www.bates.edu/
version:2.1
end:vcard

09:26:54.971341 IP a9289.bates.edu.52330 > LAubervilliers-151-13-110-134.w217-128.abo.wanadoo.fr.http: UDP, length 1 09:26:55.124298 IP LAubervilliers-151-13-110-134.w217-128.abo.wanadoo.fr > a9289.bates.edu: ICMP LAubervilliers-151-13-110-134.w217-128.abo.wanadoo.fr udp port http unreachable, length 36 I was going to ignore it, but I happened to check to see if other computers were doing the same thing, and I discovered that every macintosh with the agent is doing the same thing.

smime.p7s
Description: S/MIME Cryptographic Signature