On Fri, Feb 15, 2002 at 11:11:42AM -0700, DeBerry, Casey wrote:
> 11:10:29.646401 B 0:c0:2:23:61:75 > Broadcast sap e0 ui/C IPX/SMB
> 11:10:29.647579 B 0:c0:2:23:61:75 > Broadcast sap e0 ui/C IPX/SMB
> 11:10:29.648855 B 0:c0:2:23:61:75 > Broadcast sap e0 ui/C IPX/SMB
> 11:10:29.650119 B 0.00:c0:02:23:61:75.4013 >
> 0.ff:ff:ff:ff:ff:ff.452:ipx-sap-nearest-req 4
> 'ACACACACACABAFEEFFDFJFDCACACACACACACACAAA'
> 11:10:29.651387 B 0.00:c0:02:23:61:75.4013 >
> 0.ff:ff:ff:ff:ff:ff.452:ipx-sap-req 4
> 'ACACACACACAIAFEEFFDFJFDCACACACACACACACAAA'
> 11:10:29.652651 B 0.00:c0:02:23:61:75.4013 >
> 0.ff:ff:ff:ff:ff:ff.452:ipx-sap-req 278
> 'ACACACACACABAFEEFFDFJFDCACACACACACACACAAA'
> 11:10:49.653161 B 0:c0:2:23:61:75 Broadcast 8137 60:
> [000] FF FF 00 22 00 04 00 00 00 00 FF FF FF FF FF FF ..."............
> [010] 04 52 00 00 00 00 00 C0 02 23 61 75 40 13 00 03 .R.......#au@...
> [020] 00 04 41 43 41 43 41 43 41 43 41 43 41 42 ..ACACACACACAB
> 11:10:49.654441 B 0:c0:2:23:61:75 Broadcast 8137 60:
> [000] FF FF 00 22 00 04 00 00 00 00 FF FF FF FF FF FF ..."............
> [010] 04 52 00 00 00 00 00 C0 02 23 61 75 40 13 00 01 .R.......#au@...
> [020] 00 04 41 43 41 43 41 43 41 43 41 43 41 43 ..ACACACACACAC
> 11:10:49.655748 B 0:c0:2:23:61:75 Broadcast 8137 60:
> [000] FF FF 00 22 00 04 00 00 00 00 FF FF FF FF FF FF ..."............
> [010] 04 52 00 00 00 00 00 C0 02 23 61 75 40 13 00 01 .R.......#au@...
> [020] 02 78 41 43 41 43 41 43 41 43 41 43 41 42 .xACACACACACAB
> 11:10:49.656978 B 0:c0:2:23:61:75 > Broadcast sap e0 ui/C IPX/SM
> i am seeing this on a friends network and trying to figure out wth is going
> on
It looks like IPX/SPX, aka Novel Netware, is enabled on your
friends Windows boxen. Go under the control panel network configuration
and I'll bet you'll find the IPX protocol on the list. If he don't need
it, nuke it. Windows is chatty enough but it chats on all the bound
protocols. So if you have TCP/IP and Netbui and IPX/SPX together, the
name resolution broadcast cruft will generate 3x the traffic.
Mike
--
Michael H. Warfield | (770) 985-6132 | [EMAIL PROTECTED]
/\/\|=mhw=|\/\/ | (678) 463-0932 | http://www.wittsend.com/mhw/
NIC whois: MHW9 | An optimist believes we live in the best of all
PGP Key: 0xDF1DD471 | possible worlds. A pessimist is sure of it!
