Sorry, what is all this about again? I can't find the start of the thread, looks like someone changed subject.
Most of the useless traffic to me just now is from Mickeybox netbios, apart from this: 11:00:46.639154 arp who-has 172.16.14.195 tell 0.0.0.0 11:00:48.987910 arp who-has 172.16.22.134 tell 0.0.0.0 11:00:53.712252 arp who-has 172.16.22.237 tell 0.0.0.0 11:00:55.701751 arp who-has 172.16.23.39 tell 0.0.0.0 11:00:55.966905 arp who-has 172.16.26.66 tell 0.0.0.0 11:00:56.630013 arp who-has 172.16.20.72 tell 0.0.0.0 In September I asked Paradise about this: Sep 15 23:32:00 kernel: NET: 317 messages suppressed. Sep 15 23:32:00 kernel: martian destination 0.0.0.0 from 203.79.64.162, dev eth1 Sep 15 23:32:00 last message repeated 9 times This is caused by the following traffic: 23:32:00.781152 arp who-has 0.0.0.0 tell 203.79.64.162 23:32:00.796797 arp who-has 0.0.0.0 tell 203.79.64.162 23:32:00.803665 arp who-has 0.0.0.0 tell 203.79.64.162 but received nothing but their boiler bull about how wonderful their FUA (Frequently Useless Answers) are. My guess is more misconfigured (ie normal) Mickeyboxes. Since it doesn't show up as chargable traffic I doubt I'm paying for it, so I should just change the firewall to dump it without logging. Volker -- Volker Kuhlmann is possibly list0570 with the domain in header http://volker.dnsalias.net/ Please do not CC list postings to me.
