Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 29 May 2000 02:38:54 -0500
From:      David Schooley <dcschooley@ieee.org>
To:        Omachonu Ogali <oogali@intranova.net>
Cc:        freebsd-net@freebsd.org
Subject:   Re: Strange Network Traffic
Message-ID:  <p04310101b557bf5d3405@[192.168.1.4]>
In-Reply-To:  <Pine.BSF.4.10.10005290122520.532-100000@hydrant.intranova.net>
References:  <Pine.BSF.4.10.10005290122520.532-100000@hydrant.intranova.net>

next in thread | previous in thread | raw e-mail | index | archive | help
At 1:23 AM -0400 5/29/00, Omachonu Ogali wrote:
>
>  >
>>  May 25 23:30:00 bicycle /kernel: ipfw: 1000 Deny UDP 192.168.1.1:1030
>>  255.255.255.255:162 in via fxp1
>>  May 25 23:30:00 bicycle /kernel: ipfw: 1000 Deny UDP 192.168.1.1:1030
>>  255.255.255.255:162 in via fxp0
>>
>>  and later, it happens again:
>>
>>  May 28 16:52:04 bicycle /kernel: ipfw: 1000 Deny UDP 192.168.1.1:1031
>>  255.255.255.255:162 in via fxp1
>>  May 28 16:52:04 bicycle /kernel: ipfw: 1000 Deny UDP 192.168.1.1:1031
>>  255.255.255.255:162 in via fxp0
>>
>>  The Linksys shouldn't be doing anything with SNMP, so are evil
>>  crackers trying to do something?
>>
>>
>
>The router is broadcasting SNMP traps (port 162) to the LAN.
>

I know that's what I am getting, but the documentation for the router 
doesn't say anything about support for SNMP, nor does the router 
respond when SNMP packets go the other way, so I got suspicious. I 
have been playing around with it, and cycling power to the router 
causes those packets to be sent out, so I guess the router really is 
doing it.

-- 
---------------------------------------------------
   David C. Schooley, Ph.D.
   Transmission Operations/Technical Operations Support
   Commonwealth Edison Company
   work phone: 630-691-4466/(472)-4466
   work email: mailto:david.c.schooley@ucm.com
   home email: mailto:dcschooley@ieee.org


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?p04310101b557bf5d3405>