From owner-freebsd-current@FreeBSD.ORG  Mon May 22 04:15:20 2006
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
X-Original-To: freebsd-current@FreeBSD.org
Delivered-To: freebsd-current@FreeBSD.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id B471D16A555;
	Mon, 22 May 2006 04:15:20 +0000 (UTC)
	(envelope-from ganbold@micom.mng.net)
Received: from publicd.ub.mng.net (publicd.ub.mng.net [202.179.0.88])
	by mx1.FreeBSD.org (Postfix) with ESMTP id DF83043D48;
	Mon, 22 May 2006 04:15:19 +0000 (GMT)
	(envelope-from ganbold@micom.mng.net)
Received: from [202.179.0.164] (helo=[192.168.0.18])
	by publicd.ub.mng.net with esmtpa (Exim 4.61 (FreeBSD))
	(envelope-from <ganbold@micom.mng.net>)
	id 1Fi1om-000I8b-Ej; Mon, 22 May 2006 13:14:56 +0900
Message-ID: <44713AC0.70409@micom.mng.net>
Date: Mon, 22 May 2006 13:14:56 +0900
From: Ganbold <ganbold@micom.mng.net>
User-Agent: Thunderbird 1.5.0.2 (X11/20060425)
MIME-Version: 1.0
To: Brian Candler <B.Candler@pobox.com>
References: <446D7741.10102@micom.mng.net>	<20060519095344.P13833@beagle.kn.op.dlr.de>	<446D7C09.3090003@micom.mng.net>	<20060519081215.GO84736@cell.sick.ru>	<446D80EC.3010106@micom.mng.net>
	<20060519121256.GA13356@uk.tiscali.com>
In-Reply-To: <20060519121256.GA13356@uk.tiscali.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: freebsd-current@FreeBSD.org, Harti Brandt <harti@FreeBSD.org>,
	Gleb Smirnoff <glebius@FreeBSD.org>
Subject: Re: small patch for ngctl
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>, 
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 22 May 2006 04:15:21 -0000

Brian Candler wrote:
> On Fri, May 19, 2006 at 05:25:16PM +0900, Ganbold wrote:
>   
>> Rec'd data packet on hook "qqqq":
>> 0000:  ff ff ff ff ff ff 00 14 6c 2e 23 71 08 00 45 00  ........l.#q..E.
>> 0010:  00 4e 17 4e 00 00 80 11 a0 c6 c0 a8 00 3b c0 a8  .N.N.........;..
>> 0020:  00 ff 00 89 00 89 00 3a b1 dc 80 8f 01 10 00 01  .......:........
>> 0030:  00 00 00 00 00 00 20 45 4f 45 42 46 44 45 42 45  ...... EOEBFDEBE
>> 0040:  42 43 41 43 41 43 41 43 41 43 41 43 41 43 41 43  BCACACACACACACAC
>> ...
>>
>> Is it what it supposed to handle?
>>     
>
> Looks like a valid ethernet frame to me;
>
> ff:ff:ff:ff:ff:ff  - destination MAC addr (broadcast)
> 00:14:6c:2e:23:71  - source MAC addr
> 0800               - protocol (IP)
>   45 00            - IPv4
>   00 4e            - datagram length
>   17 4e 00 00      - ID, flags, frag offset
>   80               - TTL
>   11               - protocol (UDP)
>   a0 c6            - header checksum
>   c0 a8 00 3b      - source IP: 192.168.0.59
>   c0 a8 00 ff      - destination IP: 192.168.0.255
>   00 89            - source port 137
>   00 89            - destination port 137
>   00 3a            - length
>   b1 dc            - UDP checksum
>   ...              - ... data
>
> So I'd say this is some Windows machine broadcasting NetBIOS crap around
> your network :-)
>   
Yeah, I'm all alone with FreeBSD, everybody in office uses Windows 
except me :(

Ganbold
> Regards,
>
> Brian.
> _______________________________________________
> freebsd-current@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-current
> To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org"
>
>
>
>