Date: Tue, 13 Mar 2001 15:12:26 -0800 (PST) From: =?iso-8859-1?q?Johan=20Petersson?= <kjep@yahoo.com> To: Alexandre Florio <alexandre@cipher.com.br> Cc: freebsd-questions@freebsd.org Subject: Re: Strange network traffic Message-ID: <20010313231226.27477.qmail@web123.yahoomail.com> In-Reply-To: <20010313194830.6a313535.alexandre@cipher.com.br>
next in thread | previous in thread | raw e-mail | index | archive | help
I'm running tcpdump telnetted in via another network adapter (ed0) to hawk to avoid just that, so the connection is via another interface and another port (telnet, not SSH). Also there is still the Netbios traffic. The tricky part is I don't know whether to blame hawk or eagle for generating the traffic. I'm leaning towards hawk though since there is no traffic to/from the other server falcon. --- Alexandre Florio <alexandre@cipher.com.br> skrev: > > Are you running tcpdump locallly on hawk or are you running on a ssh > connection? > > If you are on a ssh connection, this traffic can be assigned to the > output of tcpdump going to your local machine... > > On Tue, 13 Mar 2001 14:27:27 -0800 (PST) > Johan Petersson <kjep@yahoo.com> wrote: > > > Hi everyone, > > > > I'm seeing a lot of network traffic on my LAN even when the computers > > are idle. To me it looks like some sort of keepalive or pinging, but > > with several packages per second. Here is the output from tcpdump: > > > > root@hawk:/home/johan$ tcpdump -i ep0 -N > > tcpdump: listening on ep0 > > 11:12:15.754180 hawk.ssh > eagle.3013: . ack 3581473918 win 17520 > > 11:12:15.754453 eagle.3013 > hawk.ssh: . ack 1 win 16212 (DF) > > 11:12:15.924171 hawk.netbios-ssn > eagle.3010: . ack 3543040564 win > 17520 > > 11:12:15.924444 eagle.3010 > hawk.netbios-ssn: . ack 1 win 16286 (DF) > > 11:12:16.234177 hawk.ssh > eagle.3013: . ack 1 win 17520 > > 11:12:16.234450 eagle.3013 > hawk.ssh: . ack 1 win 16212 (DF) > > 11:12:16.404180 hawk.netbios-ssn > eagle.3010: . ack 1 win 17520 > > 11:12:16.404462 eagle.3010 > hawk.netbios-ssn: . ack 1 win 16286 (DF) > > 11:12:16.714184 hawk.ssh > eagle.3013: . ack 1 win 17520 > > 11:12:16.714458 eagle.3013 > hawk.ssh: . ack 1 win 16212 (DF) > > 11:12:16.884176 hawk.netbios-ssn > eagle.3010: . ack 1 win 17520 > > 11:12:16.884468 eagle.3010 > hawk.netbios-ssn: . ack 1 win 16286 (DF) > > 11:12:17.194184 hawk.ssh > eagle.3013: . ack 1 win 17520 > > 11:12:17.194466 eagle.3013 > hawk.ssh: . ack 1 win 16212 (DF) > > 11:12:17.364323 hawk.netbios-ssn > eagle.3010: . ack 1 win 17520 > > 11:12:17.364602 eagle.3010 > hawk.netbios-ssn: . ack 1 win 16286 (DF) > > -- > Alexandre Florio __________________________________________________ Do You Yahoo!? Yahoo! Auctions - Buy the things you want at great prices. http://auctions.yahoo.com/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010313231226.27477.qmail>