On Thu, Mar 27, 2003 at 02:28:37PM -0500, Gary Huntress wrote: > I have noticed on many occasions some extensive traffic on my internal > network that I cannot explain. Below you will see two sets of tcpdump > traces. I have a mysql server running on my internal host named > "herzegbol" and a windows 98 host named shelbyville
[snip] > This trace is after I issue mysqladmin shutdown: > 14:32:09.886091 eth1 > herzegbol.mysql > shelbyville.2333: R 0:0(0) ack > 2360059956 win 0 (DF) > 14:32:15.626067 eth1 > herzegbol.mysql > shelbyville.2334: R 0:0(0) ack > 2356113189 win 0 (DF) > 14:32:17.586063 eth1 > herzegbol.mysql > shelbyville.2308: R 0:0(0) ack > 1867829359 win 0 (DF) > 14:32:20.696068 eth1 > herzegbol.mysql > shelbyville.2321: R 0:0(0) ack > 2130321013 win 0 (DF) > 14:32:25.566094 eth1 > herzegbol.mysql > shelbyville.2324: R 0:0(0) ack > 2251852705 win 0 (DF) > 14:32:30.066104 eth1 > herzegbol.mysql > shelbyville.2325: R 0:0(0) ack > 2264947201 win 0 (DF) > > The reason this is confusing to me is that the traffic originates on > the mysql server "herzegbol" via the mysql port and the destination > is the windows box on dozens of ports and there is no program or > process on the windows machine that is connected to the database > server. As far as I can tell there is absolutely no reason for > Herzegbol to talk to shelbyville, yet this traffic will pop up > almost every day for a period of time and swamp my network. I would > like to identify the source and understand the cause. That's really odd. Are you *sure* it actually shuts down? Jeremy -- Jeremy D. Zawodny | Perl, Web, MySQL, Linux Magazine, Yahoo! <[EMAIL PROTECTED]> | http://jeremy.zawodny.com/ MySQL 4.0.8: up 52 days, processed 1,799,891,638 queries (397/sec. avg) -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe: http://lists.mysql.com/[EMAIL PROTECTED]
