Friday Follies #2 [7:73371]

2003-08-01 Thread John Neiberger
[This isn't the usual type of follies question where you have to figure
something out. In this case, you either know the answer or you don't. If you
don't, you can probably figure out how to look it up and it would be good
information to have in case you see this in your own network.]

Your network uses RFC 1918 private IP address space (10.0.0.0/8) for your
addressing. You have a logging access list configured on a LAN interface and
you begin seeing traffic from devices in the 169.254.0.0/16 subnet destined
for 169.254.255.255. You don't have any machines configured with addresses
in this subnet, so what could it be?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=73371t=73371
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com



Re: Friday Follies #2 [7:73371]

2003-08-01 Thread Howard C. Berkowitz
At 7:00 PM + 8/1/03, John Neiberger wrote:
[This isn't the usual type of follies question where you have to figure
something out. In this case, you either know the answer or you don't. If you
don't, you can probably figure out how to look it up and it would be good
information to have in case you see this in your own network.]

Your network uses RFC 1918 private IP address space (10.0.0.0/8) for your
addressing. You have a logging access list configured on a LAN interface and
you begin seeing traffic from devices in the 169.254.0.0/16 subnet destined
for 169.254.255.255. You don't have any machines configured with addresses
in this subnet, so what could it be?

Oh. Addresses from THAT planet. :-)




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=73380t=73371
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: Friday Follies #2 [7:73371]

2003-08-01 Thread Charles Cthulu Riley
Three words

MY-CROW-SOFF?


John Neiberger  wrote in message
news:[EMAIL PROTECTED]
 [This isn't the usual type of follies question where you have to figure
 something out. In this case, you either know the answer or you don't. If
you
 don't, you can probably figure out how to look it up and it would be good
 information to have in case you see this in your own network.]

 Your network uses RFC 1918 private IP address space (10.0.0.0/8) for your
 addressing. You have a logging access list configured on a LAN interface
and
 you begin seeing traffic from devices in the 169.254.0.0/16 subnet
destined
 for 169.254.255.255. You don't have any machines configured with addresses
 in this subnet, so what could it be?
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=73378t=73371
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: Friday Follies #2 [7:73371]

2003-08-01 Thread Jason Viera
Bill Gates leaving his mark on your network??
Jason



 [This isn't the usual type of follies question where you have to figure
 something out. In this case, you either know the answer or you don't. If
you
 don't, you can probably figure out how to look it up and it would be good
 information to have in case you see this in your own network.]

 Your network uses RFC 1918 private IP address space (10.0.0.0/8) for your
 addressing. You have a logging access list configured on a LAN interface
and
 you begin seeing traffic from devices in the 169.254.0.0/16 subnet
destined
 for 169.254.255.255. You don't have any machines configured with addresses
 in this subnet, so what could it be?
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=73375t=73371
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com



Re: Friday Follies #2 [7:73371]

2003-08-01 Thread John Neiberger
Possibly, but you have to give more detail to win the prize.  :-)  

[Notice: there is no prize associated with this question.  ]

 Jason Viera 8/1/03 2:22:32 PM 
Bill Gates leaving his mark on your network??
Jason



 [This isn't the usual type of follies question where you have to figure
 something out. In this case, you either know the answer or you don't. If
you
 don't, you can probably figure out how to look it up and it would be good
 information to have in case you see this in your own network.]

 Your network uses RFC 1918 private IP address space (10.0.0.0/8) for your
 addressing. You have a logging access list configured on a LAN interface
and
 you begin seeing traffic from devices in the 169.254.0.0/16 subnet
destined
 for 169.254.255.255. You don't have any machines configured with
addresses
 in this subnet, so what could it be?
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com 
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=73379t=73371
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Friday Follies #2 [7:73371]

2003-08-01 Thread John Neiberger
Yes! Daniel mentions the RFC and Kevin Wigle mentioned APIPA, or Automatic
Private IP Addressing. You can find out more about that at:

http://www.webopedia.com/TERM/A/APIPA.html 

This means that Daniel and Kevin get to share the extra credit prize!  

Thanks to all who participated,
John

 Daniel Cotts 8/1/03 3:16:24 PM 
pad
pad 
pad
ftp://ftp.rfc-editor.org/in-notes/rfc3330.txt 

 -Original Message-
 From: John Neiberger [mailto:[EMAIL PROTECTED] 
 Sent: Friday, August 01, 2003 2:00 PM
 To: [EMAIL PROTECTED] 
 Subject: Friday Follies #2 [7:73371]
 
 
 [This isn't the usual type of follies question where you have 
 to figure
 something out. In this case, you either know the answer or 
 you don't. If you
 don't, you can probably figure out how to look it up and it 
 would be good
 information to have in case you see this in your own network.]
 
 Your network uses RFC 1918 private IP address space 
 (10.0.0.0/8) for your
 addressing. You have a logging access list configured on a 
 LAN interface and
 you begin seeing traffic from devices in the 169.254.0.0/16 
 subnet destined
 for 169.254.255.255. You don't have any machines configured 
 with addresses
 in this subnet, so what could it be?
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com 
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com 
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=73388t=73371
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Friday Follies #2 [7:73371]

2003-08-01 Thread Daniel Cotts
pad
pad 
pad
ftp://ftp.rfc-editor.org/in-notes/rfc3330.txt

 -Original Message-
 From: John Neiberger [mailto:[EMAIL PROTECTED]
 Sent: Friday, August 01, 2003 2:00 PM
 To: [EMAIL PROTECTED]
 Subject: Friday Follies #2 [7:73371]
 
 
 [This isn't the usual type of follies question where you have 
 to figure
 something out. In this case, you either know the answer or 
 you don't. If you
 don't, you can probably figure out how to look it up and it 
 would be good
 information to have in case you see this in your own network.]
 
 Your network uses RFC 1918 private IP address space 
 (10.0.0.0/8) for your
 addressing. You have a logging access list configured on a 
 LAN interface and
 you begin seeing traffic from devices in the 169.254.0.0/16 
 subnet destined
 for 169.254.255.255. You don't have any machines configured 
 with addresses
 in this subnet, so what could it be?
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=73383t=73371
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: Friday Follies #2 [7:73371]

2003-08-01 Thread Kevin Wigle
APIPA

leaving for someone else to take further.


- Original Message -
From: John Neiberger 
To: 
Sent: Friday, August 01, 2003 3:00 PM
Subject: Friday Follies #2 [7:73371]


 [This isn't the usual type of follies question where you have to figure
 something out. In this case, you either know the answer or you don't. If
you
 don't, you can probably figure out how to look it up and it would be good
 information to have in case you see this in your own network.]

 Your network uses RFC 1918 private IP address space (10.0.0.0/8) for your
 addressing. You have a logging access list configured on a LAN interface
and
 you begin seeing traffic from devices in the 169.254.0.0/16 subnet
destined
 for 169.254.255.255. You don't have any machines configured with addresses
 in this subnet, so what could it be?
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com

~~
allowattachmentsout




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=73387t=73371
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: Friday Follies #2 [7:73371]

2003-08-01 Thread annlee
Actually, Apple used that block as well for local networking.

quote:
If the host has a Microsoft Windows OS (9x or 2000/XP) or an 
Apple OS, it will fall back to what is called the auto-configure 
address, which is an address from the 169.254/16 address space 
(this was in accordance with the 
draft-ietf-dhc-ipv4-autoconfig-04.txt, which expired in October, 
1999). The host will check on the network segment for a conflict 
with another host using the same address, up to 10 addresses. The 
client will then check in the background for a DHCP server every 
5 minutes, abandoning the auto-configured address as soon as it 
can obtain one from the server. I have no information at this 
time on the behavior of various Linux clients.
end quote

from my DNS-DHCP tutorial

Annlee

Charles Cthulu Riley wrote:
 Three words
 
 MY-CROW-SOFF?
 
 
 John Neiberger  wrote in message
 news:[EMAIL PROTECTED]
 
[This isn't the usual type of follies question where you have to figure
something out. In this case, you either know the answer or you don't. If
 
 you
 
don't, you can probably figure out how to look it up and it would be good
information to have in case you see this in your own network.]

Your network uses RFC 1918 private IP address space (10.0.0.0/8) for your
addressing. You have a logging access list configured on a LAN interface
 
 and
 
you begin seeing traffic from devices in the 169.254.0.0/16 subnet
 
 destined
 
for 169.254.255.255. You don't have any machines configured with addresses
in this subnet, so what could it be?
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=73386t=73371
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: Friday Follies #2 [7:73371]

2003-08-01 Thread Howard C. Berkowitz
At 9:04 PM + 8/1/03, annlee wrote:
Actually, Apple used that block as well for local networking.

quote:
If the host has a Microsoft Windows OS (9x or 2000/XP) or an
Apple OS, it will fall back to what is called the auto-configure
address, which is an address from the 169.254/16 address space
(this was in accordance with the
draft-ietf-dhc-ipv4-autoconfig-04.txt, which expired in October,
1999).


The range finally made it into a DHCP RFC and is IANA reserved.

The host will check on the network segment for a conflict
with another host using the same address, up to 10 addresses. The
client will then check in the background for a DHCP server every
5 minutes, abandoning the auto-configured address as soon as it
can obtain one from the server. I have no information at this
time on the behavior of various Linux clients.
end quote

from my DNS-DHCP tutorial

Annlee




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=73390t=73371
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html