On Sat, 14 Jul 2001, A.J. Werkman wrote:
- At 03:52 14-07-2001 -0400, you wrote:
- >On Fri, 13 Jul 2001, A.J. Werkman wrote:
- >
- > >Date: Fri, 13 Jul 2001 20:18:15 +0200
- > >From: A.J. Werkman <[EMAIL PROTECTED]>
- > >To: [EMAIL PROTECTED]
- > >Reply-To: [EMAIL PROTECTED]
- > >Content-Type: text/plain; charset="us-ascii"; format=flowed
- > >Subject: Strange IP traffic
- > >
- > >I have a dual NIC RH7.1 box, with one NIC almost completly blocked by
- > >firewall rules.
- > >
- > >In my logfile's I find entries I can not point to any of the applications I
- > >use:
- > >
- > >eth0 PROTO=2 <host-address>:65535 244.0.1.1:65535
- > >
- > >Can anyone point me to the application that is making this trafic???
- >
- >Cablemodem connection? Likely your ISP's router. That is IGMP
- >messages.
- >
- >Just ignore it, it is harmless.
-
- What is bothering me, is that this one is not connected to a cable modem,
- not even directly connected to my ISP (only through another linux box on my
- LAN).
-
- Furthermore it is not receiving these packets, but is sending them. I know
- nothing about an application I have installed that would send these packets.
These are routing control messages and you have not posted enough
information to answer your question. Try posting a _complete_ log
entry and a description of the IP addresses and architecture of your
LAN. Be sure to identify which machine is receiving the messages.
Is there a router, switch, or manageable hub aywhere?
--
--Stephen Carville
http://www.heronforge.net/~stephen/gnupgkey.txt
==============================================================
Government is like burning witches: After years of burning young women
failed to solve any of society's problems, the solution was to burn more
young women.
==============================================================
_______________________________________________
Seawolf-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/seawolf-list
