Date: Sun, 3 Sep 2000 13:24:08 +0930 From: Greg Lehey <grog@lemis.com> To: John Hengstler <john@hei.net> Cc: FreeBSD Questions <questions@FreeBSD.org> Subject: Unexpected traffic (was: signature?) Message-ID: <20000903132408.H66079@wantadilla.lemis.com> In-Reply-To: <001101c01550$66bcf380$83a3ded1@hei.net>; from john@hei.net on Sat, Sep 02, 2000 at 07:41:02PM -0700 References: <200009022014.UAA02138@groggy.anc.ptialaska.net> <20000903085224.I17337@wantadilla.lemis.com> <001101c01550$66bcf380$83a3ded1@hei.net>
next in thread | previous in thread | raw e-mail | index | archive | help
[Format recovered--see http://www.lemis.com/email/email-format.html] On Saturday, 2 September 2000 at 19:41:02 -0700, John Hengstler wrote: > On Saturday, September 02, 2000 4:22 PM, "Greg Lehey" <grog@lemis.com> wrote: > >> [moved to -questions; this isn't an ISP issue] >> >> On Saturday, 2 September 2000 at 20:14:03 +0000, groggy@iname.com wrote: >>> can anyone tell me what the heck my ISP is doing to my machine? >> >> It's the name of your system: >> >>> Received: (from abc@localhost) >>> by groggy.anc.ptialaska.net (8.9.3/8.9.3) id UAA02138 >>> for isp@freebsd.org; Sat, 2 Sep 2000 20:14:03 GMT >>> (envelope-from groggy@iname.com) >> >>> is it a recognizable signature? they repeat this every >>> 1-2 minutes - and it does clog my connection a little! >>> is it stuff i should allow - or is something strange >>> going on? udp 68 is the "bootstrap protocol client". >>> i don't know what the heck that has to do with me, >> >> The messages seem to be coming from your end. I don't even see any >> replies. The two messages at 05:13:25.548800 have nothing to do with >> you, but suggest that you're on a broadcast medium. Considering that >> the names suggest this is ADSL, you might ask your ISP about that. >> >>> this is the full sequence ... >>> >>> 05:13:24.048994 209-193-28-245.adsl.jnu.acsalaska.net.netbios-ns > 208.151.115.193.netbios-ns: udp 68 >>> 05:13:24.049044 209-193-28-245.adsl.jnu.acsalaska.net.netbios-ns > 208.151.115.193.netbios-ns: udp 68 >>> 05:13:24.168796 groggy.netbios-ns > 208.151.115.193.netbios-ns: udp 68 >>> 05:13:24.168828 groggy.netbios-ns > 208.151.115.193.netbios-ns: udp 68 >>> 05:13:24.308786 groggy.51488 > 208.151.115.193.netbios-ns: udp 68 >>> 05:13:24.308822 groggy.51488 > 208.151.115.193.netbios-ns: udp 68 >>> 05:13:24.428758 groggy.46346 > 208.151.115.193.netbios-ns: udp 68 >> >>> i don't use dhcp or anything like that ... >> >> Are you sure you're not running some other daemon which uses this >> service? Take a look with 'ps lax' and see what you get. > > Aren't these caused by samba or another program of the sort which are > answered by an "MS" machine? That is how it is on my network... The messages here are originating from machine 'groggy'. I'm assuming from the context that it's a FreeBSD machine. Greg -- When replying to this message, please copy the original recipients. For more information, see http://www.lemis.com/questions.html Finger grog@lemis.com for PGP public key See complete headers for address and phone numbers To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000903132408.H66079>