Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 20 May 1997 01:37:49 +0200 (MET DST)
From:      Joachim.Wunder@lrz.tu-muenchen.de (Joachim Wunder)
To:        questions@FreeBSD.ORG
Subject:   tcpdump output - what means this?
Message-ID:  <9705192337.AA16389@sun1.lrz-muenchen.de>

next in thread | raw e-mail | index | archive | help
Hi!

What does the following tcpdump output from tun0 mean?

01:33:00.660779 molonita.netbios-ns > hp10.lrz-muenchen.de.domain: 73+ (53)
01:33:00.720209 hp10.lrz-muenchen.de.domain > molonita.netbios-ns: 73 NXDomain* 0/0/0 (43)
01:33:02.171538 molonita.netbios-ns > hp10.lrz-muenchen.de.domain: 73+ (53)
01:33:02.230218 hp10.lrz-muenchen.de.domain > molonita.netbios-ns: 73 NXDomain* 0/0/0 (43)
01:33:03.682044 molonita.netbios-ns > dfvgate.lrz-muenchen.de.domain: 73+ (53)
01:33:03.740223 dfvgate.lrz-muenchen.de.domain > molonita.netbios-ns: 73 NXDomain* 0/0/0 (43)
01:33:05.192801 molonita.netbios-ns > dfvgate.lrz-muenchen.de.domain: 73+ (53)
01:33:05.250216 dfvgate.lrz-muenchen.de.domain > molonita.netbios-ns: 73 NXDomain* 0/0/0 (43)
01:33:06.703384 molonita.netbios-ns > dfvgate.lrz-muenchen.de.domain: 73+ (53)
01:33:06.760233 dfvgate.lrz-muenchen.de.domain > molonita.netbios-ns: 73 NXDomain* 0/0/0 (43)
01:33:08.213943 molonita.netbios-ns > hp10.lrz-muenchen.de.domain: 73+ (53)
01:33:08.270222 hp10.lrz-muenchen.de.domain > molonita.netbios-ns: 73 NXDomain* 0/0/0 (43)
01:33:09.724594 molonita.netbios-ns > hp10.lrz-muenchen.de.domain: 73+ (53)
01:33:09.780306 hp10.lrz-muenchen.de.domain > molonita.netbios-ns: 73 NXDomain* 0/0/0 (43)

[...]

Molonita is a machine which is connected via IP masquerading to my FreeBSD-
machine named Marauder (which doesn't appear on the output..).

hp10 and dfvgate are the nameservers of my ISP. So what are these nameservers
trying to do with molonita??

TIA,
Achim




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9705192337.AA16389>