Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 7 Dec 2000 20:55:17 -0400
From:      "Matt Rudderham" <matt@researcher.com>
To:        <freebsd-questions@FreeBSD.ORG>
Subject:   SLightly OT: Strange Traffic
Message-ID:  <NDBBLEKOOLGIBFPGLFEKAEOBCJAA.matt@researcher.com>

next in thread | raw e-mail | index | archive | help
Hi,
Since I started using the IPLOG utility I've been seeing some weird traffic
repreating every couple hours.   I have a FreeBSD 4.0-Release Gateway/Server
with a Win/FreeBSD box inside connected with a crossover. I don't if
everyone if familiar with IPLog, it basically just tells me about an
incoming connection, ping, etc.. Here is what I'm seeing every few hours,
the addresses usually are different, but the box will be quiet for a long
time, then within a few seconds, all of these pings seem to come in
simulataneously. Can anyone read anything into this for me?

Dec  7 20:43:50 matt iplog[37397]: ICMP: echo reply from
cc18620-a.abdn1.md.home.com (8 bytes)
Dec  7 20:43:50 matt iplog[37397]: ICMP: echo reply from
user-vcaumtn.dsl.mindspring.com (8 bytes)
Dec  7 20:43:51 matt iplog[37397]: ICMP: echo reply from
c193.150.211.23.cm-upc.chello.se (8 bytes)
Dec  7 20:43:51 matt iplog[37397]: ICMP: echo reply from
ip197.stamford7.ct.pub-ip.psi.net (8 bytes)
Dec  7 20:43:51 matt iplog[37397]: ICMP: echo reply from
roc-204-210-131-220.rochester.rr.com (8 bytes)
Dec  7 20:43:52 matt iplog[37397]: ICMP: echo reply from
dhcp065-024-180-092.columbus.rr.com (8 bytes)
Dec  7 20:43:52 matt iplog[37397]: ICMP: echo from m25-mp1-cvx1a.swa.ntl.com
(8 bytes)
Dec  7 20:43:53 matt iplog[37397]: ICMP: echo reply from
adsl-61-4-15.mia.bellsouth.net (8 bytes)
Dec  7 20:43:54 matt iplog[37397]: ICMP: echo reply from ppp114.rcvideo.com
(8 bytes)
Dec  7 20:43:54 matt iplog[37397]: ICMP: echo reply from
lsanca1-ar2-082-252.dsl.gtei.net (8 bytes)
Dec  7 20:44:05 matt iplog[37397]: ICMP: echo reply from
cx480910-c.hmpt1.va.home.com (8 bytes)
Dec  7 20:45:25 matt iplog[37397]: ICMP: echo reply from 65.6.141.166 (8
bytes)
Dec  7 20:45:25 matt iplog[37397]: ICMP: echo reply from 216.246.26.14 (8
bytes)
Dec  7 20:45:26 matt iplog[37397]: ICMP: echo reply from
6532150hfc97.tampabay.rr.com (8 bytes)
Dec  7 20:45:26 matt iplog[37397]: ICMP: echo reply from
c554833-a.potlnd1.or.home.com (8 bytes)
Dec  7 20:45:26 matt iplog[37397]: ICMP: echo reply from
adsl-20-149-30.bhm.bellsouth.net (8 bytes)
Dec  7 20:45:26 matt iplog[37397]: ICMP: echo reply from
rm05-24-167-188-17.ce.mediaone.net (8 bytes)
Dec  7 20:45:26 matt iplog[37397]: ICMP: echo reply from
dv158s56.lawrence.ks.us (8 bytes)
Dec  7 20:46:46 matt iplog[37397]: ICMP: echo reply from 24.177.36.199 (8
bytes)
Dec  7 20:46:52 matt iplog[37397]: ICMP: echo reply from
c1009061-a.mrcr1.wa.home.com (8 bytes)
Dec  7 20:48:12 matt iplog[37397]: ICMP: echo reply from 24.180.82.251 (8
bytes)
Dec  7 20:48:12 matt iplog[37397]: ICMP: echo reply from dial-253.quadro.net
(8 bytes)
Dec  7 20:48:22 matt iplog[37397]: ICMP: echo reply from
stouke0.computer.wfu.edu (8 bytes)
Dec  7 20:48:22 matt iplog[37397]: ICMP: echo reply from
DIALUP478.SCCOL-TNT-1.USIT.NET (8 bytes)
Dec  7 20:48:22 matt iplog[37397]: ICMP: echo reply from
resnet-51-117.dorm.utexas.edu (8 bytes)
Dec  7 20:48:23 matt iplog[37397]: ICMP: (from 42.164.18.212.rev.netc.pt)
p240-33.netc.pt: port is unreachable to (ICMP: ICMP_ECHO)
Dec  7 20:49:43 matt iplog[37397]: ICMP: echo reply from 65.0.110.140 (8
bytes)
Dec  7 20:49:43 matt iplog[37397]: ICMP: echo reply from
c659308-a.olmpi1.wa.home.com (8 bytes)
Dec  7 20:49:43 matt iplog[37397]: ICMP: echo reply from
cr301888-a.pr1.on.wave.home.com (8 bytes)
Dec  7 20:49:43 matt iplog[37397]: ICMP: echo reply from
roc-24-93-30-16.rochester.rr.com (8 bytes)
Dec  7 20:49:44 matt iplog[37397]: ICMP: echo reply from
cc814209-a.chstfld1.va.home.com (8 bytes)
Dec  7 20:49:44 matt iplog[37397]: ICMP: echo reply from
ool-18bf9a9c.dyn.optonline.net (8 bytes)
Dec  7 20:49:44 matt iplog[37397]: ICMP: echo reply from
syr4-10546.twcny.rr.com (8 bytes)
Dec  7 20:49:44 matt iplog[37397]: ICMP: echo reply from
pgeisler.kin.GaSoU.edu (8 bytes)
Dec  7 20:49:48 matt iplog[37397]: ICMP: echo reply from
dgrondin.urmc.rochester.edu (8 bytes)
Dec  7 20:49:48 matt iplog[37397]: ICMP: echo reply from
dyn26-223.chem.wayne.edu (8 bytes)
Dec  7 20:49:48 matt iplog[37397]: ICMP: echo reply from
24.69.181.52.on.wave.home.com (8 bytes)
Dec  7 20:49:48 matt iplog[37397]: ICMP: echo reply from
net-216-93-40-109.hcv.com (8 bytes)
Dec  7 20:49:48 matt iplog[37397]: ICMP: echo reply from
ppp11688.qc.bellglobal.com (8 bytes)
Dec  7 20:49:48 matt iplog[37397]: ICMP: echo reply from
ool-18bc3353.dyn.optonline.net (8 bytes)
Dec  7 20:49:49 matt iplog[37397]: ICMP: echo reply from
ny-eastaurora1a-53.buf.adelphia.net (8 bytes)
Dec  7 20:49:49 matt iplog[37397]: ICMP: echo reply from
AC9D3703.ipt.aol.com (8 bytes)
Dec  7 20:49:49 matt iplog[37397]: ICMP: echo reply from
209-16-47-38.insync.net (8 bytes)
Dec  7 20:49:49 matt iplog[37397]: ICMP: echo reply from
1Cust68.tnt3.provo.ut.da.uu.net (8 bytes)
Dec  7 20:49:49 matt iplog[37397]: ICMP: echo reply from
AC9D0D79.ipt.aol.com (8 bytes)
Dec  7 20:49:49 matt iplog[37397]: ICMP: echo reply from
cb474936-a.baycty1.mi.home.com (8 bytes)
Dec  7 20:49:50 matt iplog[37397]: ICMP: echo reply from
adsl-63-207-238-218.dsl.chic01.pacbell.net (8 bytes)
Dec  7 20:49:50 matt iplog[37397]: ICMP: echo reply from
h213-58-204.RM1.albacom.net (8 bytes)
Dec  7 20:49:50 matt iplog[37397]: ICMP: echo reply from
DU120.N220.ResNet.QueensU.CA (8 bytes)
Dec  7 20:49:50 matt iplog[37397]: ICMP: echo reply from
cvx-14.madison.chorus.net (8 bytes)
Dec  7 20:49:50 matt iplog[37397]: ICMP: echo reply from
m337-mp1-cvx2a.not.ntl.com (8 bytes)
Dec  7 20:49:50 matt iplog[37397]: ICMP: echo reply from
ppp0303.remote.louisville.edu (8 bytes)
Dec  7 20:49:51 matt iplog[37397]: ICMP: echo reply from
tc3ras146.itlnet.net (8 bytes)
Dec  7 20:49:56 matt iplog[37397]: ICMP: echo reply from
dialup-64.154.140.167.Phoenix1.Level3.net (8 bytes)
Dec  7 20:49:56 matt iplog[37397]: ICMP: echo from
vt-lakechamplain1a-217.bur.adelphia.net (8 bytes)
Dec  7 20:50:06 matt iplog[37397]: ICMP: echo from
d102.focal6.interaccess.com (8 bytes)
Dec  7 20:50:07 matt iplog[37397]: ICMP: echo from 002gra142.chartermi.net
(8 bytes)
Dec  7 20:50:07 matt iplog[37397]: ICMP: echo from
ool-18bf7473.dyn.optonline.net (8 bytes)
Dec  7 20:50:07 matt iplog[37397]: ICMP: echo from AC91C852.ipt.aol.com (8
bytes)
Dec  7 20:50:07 matt iplog[37397]: ICMP: echo from
1Cust183.tnt22.hou3.da.uu.net (8 bytes)
Dec  7 20:50:07 matt iplog[37397]: ICMP: echo from
user-38lcb02.dialup.mindspring.com (8 bytes)
Dec  7 20:50:07 matt iplog[37397]: ICMP: echo from
hlfx55-2-36.ns.sympatico.ca (8 bytes)
Dec  7 20:51:07 matt iplog[37397]: ICMP: echo from
ool-18bf7473.dyn.optonline.net (8 bytes)
Dec  7 20:51:55 matt iplog[37397]: ICMP: echo from cs16210-53.houston.rr.com
(8 bytes)
Dec  7 20:52:28 matt iplog[37397]: ICMP: echo from
h-207-148-135-225.dial.cadvision.com (8 bytes)

Thanks for the help:)

- Matt



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?NDBBLEKOOLGIBFPGLFEKAEOBCJAA.matt>