Re: snmp packets

2003-08-01 Thread uberthold
ok, this turned out to be some HP remote managment/alert service coded 
into the hardware, the network card itself.
no surprise i couldn't identify any process on my system! and this goes 
to show, you'd better have a look at your hardware, _before_ you install 
it some 100 kilometers away ;)

best,
ub
Olaf Dietsche wrote:

ulrich berthold [EMAIL PROTECTED] writes:

 

SCAN Proxy (8080) attempt the next outstanding alarm message was a
SNMP public access udp. i looked into it and to my surprise found
out, that these packages are originating on the server's external
interface and going to two (nonexistent) privat ip addresses 10.0.1.80
and 10.1.0.80, about every other hour. i ngrepped the packages and
   



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: snmp packets

2003-08-01 Thread uberthold
ok, this turned out to be some HP remote managment/alert service coded 
into the hardware, the network card itself.
no surprise i couldn't identify any process on my system! and this goes 
to show, you'd better have a look at your hardware, _before_ you install 
it some 100 kilometers away ;)


best,
ub

Olaf Dietsche wrote:


ulrich berthold [EMAIL PROTECTED] writes:

 


SCAN Proxy (8080) attempt the next outstanding alarm message was a
SNMP public access udp. i looked into it and to my surprise found
out, that these packages are originating on the server's external
interface and going to two (nonexistent) privat ip addresses 10.0.1.80
and 10.1.0.80, about every other hour. i ngrepped the packages and
   





Re: snmp packets

2003-07-31 Thread Olaf Dietsche
ulrich berthold [EMAIL PROTECTED] writes:

 SCAN Proxy (8080) attempt the next outstanding alarm message was a
 SNMP public access udp. i looked into it and to my surprise found
 out, that these packages are originating on the server's external
 interface and going to two (nonexistent) privat ip addresses 10.0.1.80
 and 10.1.0.80, about every other hour. i ngrepped the packages and
[...]
 any hint on how i can find out which process is sending these out?
 might it be the hardware (networkcard) itself?

If it's about every hour, I would look into the crontabs, wether
there's an entry around that time.

Regards, Olaf.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: snmp packets

2003-07-31 Thread Olaf Dietsche
ulrich berthold [EMAIL PROTECTED] writes:

 SCAN Proxy (8080) attempt the next outstanding alarm message was a
 SNMP public access udp. i looked into it and to my surprise found
 out, that these packages are originating on the server's external
 interface and going to two (nonexistent) privat ip addresses 10.0.1.80
 and 10.1.0.80, about every other hour. i ngrepped the packages and
[...]
 any hint on how i can find out which process is sending these out?
 might it be the hardware (networkcard) itself?

If it's about every hour, I would look into the crontabs, wether
there's an entry around that time.

Regards, Olaf.