From owner-freebsd-questions Thu Dec 7 16:57:14 2000 From owner-freebsd-questions@FreeBSD.ORG Thu Dec 7 16:57:09 2000 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from matt.MUNICH.v-net.org (u57n248.hfx.eastlink.ca [24.222.57.248]) by hub.freebsd.org (Postfix) with ESMTP id 9310637B401 for ; Thu, 7 Dec 2000 16:57:08 -0800 (PST) Received: from unisys (Windozzze [192.168.8.2]) by matt.MUNICH.v-net.org (8.9.3/8.9.3) with SMTP id UAA06608 for ; Thu, 7 Dec 2000 20:57:02 -0400 (AST) (envelope-from matt@researcher.com) From: "Matt Rudderham" To: Subject: SLightly OT: Strange Traffic Date: Thu, 7 Dec 2000 20:55:17 -0400 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Importance: Normal Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hi, Since I started using the IPLOG utility I've been seeing some weird traffic repreating every couple hours. I have a FreeBSD 4.0-Release Gateway/Server with a Win/FreeBSD box inside connected with a crossover. I don't if everyone if familiar with IPLog, it basically just tells me about an incoming connection, ping, etc.. Here is what I'm seeing every few hours, the addresses usually are different, but the box will be quiet for a long time, then within a few seconds, all of these pings seem to come in simulataneously. Can anyone read anything into this for me? Dec 7 20:43:50 matt iplog[37397]: ICMP: echo reply from cc18620-a.abdn1.md.home.com (8 bytes) Dec 7 20:43:50 matt iplog[37397]: ICMP: echo reply from user-vcaumtn.dsl.mindspring.com (8 bytes) Dec 7 20:43:51 matt iplog[37397]: ICMP: echo reply from c193.150.211.23.cm-upc.chello.se (8 bytes) Dec 7 20:43:51 matt iplog[37397]: ICMP: echo reply from ip197.stamford7.ct.pub-ip.psi.net (8 bytes) Dec 7 20:43:51 matt iplog[37397]: ICMP: echo reply from roc-204-210-131-220.rochester.rr.com (8 bytes) Dec 7 20:43:52 matt iplog[37397]: ICMP: echo reply from dhcp065-024-180-092.columbus.rr.com (8 bytes) Dec 7 20:43:52 matt iplog[37397]: ICMP: echo from m25-mp1-cvx1a.swa.ntl.com (8 bytes) Dec 7 20:43:53 matt iplog[37397]: ICMP: echo reply from adsl-61-4-15.mia.bellsouth.net (8 bytes) Dec 7 20:43:54 matt iplog[37397]: ICMP: echo reply from ppp114.rcvideo.com (8 bytes) Dec 7 20:43:54 matt iplog[37397]: ICMP: echo reply from lsanca1-ar2-082-252.dsl.gtei.net (8 bytes) Dec 7 20:44:05 matt iplog[37397]: ICMP: echo reply from cx480910-c.hmpt1.va.home.com (8 bytes) Dec 7 20:45:25 matt iplog[37397]: ICMP: echo reply from 65.6.141.166 (8 bytes) Dec 7 20:45:25 matt iplog[37397]: ICMP: echo reply from 216.246.26.14 (8 bytes) Dec 7 20:45:26 matt iplog[37397]: ICMP: echo reply from 6532150hfc97.tampabay.rr.com (8 bytes) Dec 7 20:45:26 matt iplog[37397]: ICMP: echo reply from c554833-a.potlnd1.or.home.com (8 bytes) Dec 7 20:45:26 matt iplog[37397]: ICMP: echo reply from adsl-20-149-30.bhm.bellsouth.net (8 bytes) Dec 7 20:45:26 matt iplog[37397]: ICMP: echo reply from rm05-24-167-188-17.ce.mediaone.net (8 bytes) Dec 7 20:45:26 matt iplog[37397]: ICMP: echo reply from dv158s56.lawrence.ks.us (8 bytes) Dec 7 20:46:46 matt iplog[37397]: ICMP: echo reply from 24.177.36.199 (8 bytes) Dec 7 20:46:52 matt iplog[37397]: ICMP: echo reply from c1009061-a.mrcr1.wa.home.com (8 bytes) Dec 7 20:48:12 matt iplog[37397]: ICMP: echo reply from 24.180.82.251 (8 bytes) Dec 7 20:48:12 matt iplog[37397]: ICMP: echo reply from dial-253.quadro.net (8 bytes) Dec 7 20:48:22 matt iplog[37397]: ICMP: echo reply from stouke0.computer.wfu.edu (8 bytes) Dec 7 20:48:22 matt iplog[37397]: ICMP: echo reply from DIALUP478.SCCOL-TNT-1.USIT.NET (8 bytes) Dec 7 20:48:22 matt iplog[37397]: ICMP: echo reply from resnet-51-117.dorm.utexas.edu (8 bytes) Dec 7 20:48:23 matt iplog[37397]: ICMP: (from 42.164.18.212.rev.netc.pt) p240-33.netc.pt: port is unreachable to (ICMP: ICMP_ECHO) Dec 7 20:49:43 matt iplog[37397]: ICMP: echo reply from 65.0.110.140 (8 bytes) Dec 7 20:49:43 matt iplog[37397]: ICMP: echo reply from c659308-a.olmpi1.wa.home.com (8 bytes) Dec 7 20:49:43 matt iplog[37397]: ICMP: echo reply from cr301888-a.pr1.on.wave.home.com (8 bytes) Dec 7 20:49:43 matt iplog[37397]: ICMP: echo reply from roc-24-93-30-16.rochester.rr.com (8 bytes) Dec 7 20:49:44 matt iplog[37397]: ICMP: echo reply from cc814209-a.chstfld1.va.home.com (8 bytes) Dec 7 20:49:44 matt iplog[37397]: ICMP: echo reply from ool-18bf9a9c.dyn.optonline.net (8 bytes) Dec 7 20:49:44 matt iplog[37397]: ICMP: echo reply from syr4-10546.twcny.rr.com (8 bytes) Dec 7 20:49:44 matt iplog[37397]: ICMP: echo reply from pgeisler.kin.GaSoU.edu (8 bytes) Dec 7 20:49:48 matt iplog[37397]: ICMP: echo reply from dgrondin.urmc.rochester.edu (8 bytes) Dec 7 20:49:48 matt iplog[37397]: ICMP: echo reply from dyn26-223.chem.wayne.edu (8 bytes) Dec 7 20:49:48 matt iplog[37397]: ICMP: echo reply from 24.69.181.52.on.wave.home.com (8 bytes) Dec 7 20:49:48 matt iplog[37397]: ICMP: echo reply from net-216-93-40-109.hcv.com (8 bytes) Dec 7 20:49:48 matt iplog[37397]: ICMP: echo reply from ppp11688.qc.bellglobal.com (8 bytes) Dec 7 20:49:48 matt iplog[37397]: ICMP: echo reply from ool-18bc3353.dyn.optonline.net (8 bytes) Dec 7 20:49:49 matt iplog[37397]: ICMP: echo reply from ny-eastaurora1a-53.buf.adelphia.net (8 bytes) Dec 7 20:49:49 matt iplog[37397]: ICMP: echo reply from AC9D3703.ipt.aol.com (8 bytes) Dec 7 20:49:49 matt iplog[37397]: ICMP: echo reply from 209-16-47-38.insync.net (8 bytes) Dec 7 20:49:49 matt iplog[37397]: ICMP: echo reply from 1Cust68.tnt3.provo.ut.da.uu.net (8 bytes) Dec 7 20:49:49 matt iplog[37397]: ICMP: echo reply from AC9D0D79.ipt.aol.com (8 bytes) Dec 7 20:49:49 matt iplog[37397]: ICMP: echo reply from cb474936-a.baycty1.mi.home.com (8 bytes) Dec 7 20:49:50 matt iplog[37397]: ICMP: echo reply from adsl-63-207-238-218.dsl.chic01.pacbell.net (8 bytes) Dec 7 20:49:50 matt iplog[37397]: ICMP: echo reply from h213-58-204.RM1.albacom.net (8 bytes) Dec 7 20:49:50 matt iplog[37397]: ICMP: echo reply from DU120.N220.ResNet.QueensU.CA (8 bytes) Dec 7 20:49:50 matt iplog[37397]: ICMP: echo reply from cvx-14.madison.chorus.net (8 bytes) Dec 7 20:49:50 matt iplog[37397]: ICMP: echo reply from m337-mp1-cvx2a.not.ntl.com (8 bytes) Dec 7 20:49:50 matt iplog[37397]: ICMP: echo reply from ppp0303.remote.louisville.edu (8 bytes) Dec 7 20:49:51 matt iplog[37397]: ICMP: echo reply from tc3ras146.itlnet.net (8 bytes) Dec 7 20:49:56 matt iplog[37397]: ICMP: echo reply from dialup-64.154.140.167.Phoenix1.Level3.net (8 bytes) Dec 7 20:49:56 matt iplog[37397]: ICMP: echo from vt-lakechamplain1a-217.bur.adelphia.net (8 bytes) Dec 7 20:50:06 matt iplog[37397]: ICMP: echo from d102.focal6.interaccess.com (8 bytes) Dec 7 20:50:07 matt iplog[37397]: ICMP: echo from 002gra142.chartermi.net (8 bytes) Dec 7 20:50:07 matt iplog[37397]: ICMP: echo from ool-18bf7473.dyn.optonline.net (8 bytes) Dec 7 20:50:07 matt iplog[37397]: ICMP: echo from AC91C852.ipt.aol.com (8 bytes) Dec 7 20:50:07 matt iplog[37397]: ICMP: echo from 1Cust183.tnt22.hou3.da.uu.net (8 bytes) Dec 7 20:50:07 matt iplog[37397]: ICMP: echo from user-38lcb02.dialup.mindspring.com (8 bytes) Dec 7 20:50:07 matt iplog[37397]: ICMP: echo from hlfx55-2-36.ns.sympatico.ca (8 bytes) Dec 7 20:51:07 matt iplog[37397]: ICMP: echo from ool-18bf7473.dyn.optonline.net (8 bytes) Dec 7 20:51:55 matt iplog[37397]: ICMP: echo from cs16210-53.houston.rr.com (8 bytes) Dec 7 20:52:28 matt iplog[37397]: ICMP: echo from h-207-148-135-225.dial.cadvision.com (8 bytes) Thanks for the help:) - Matt To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message