From owner-freebsd-questions Sat Sep 2 16:22:36 2000 Delivered-To: freebsd-questions@freebsd.org Received: from wantadilla.lemis.com (wantadilla.lemis.com [192.109.197.80]) by hub.freebsd.org (Postfix) with ESMTP id 44F5B37B422; Sat, 2 Sep 2000 16:22:27 -0700 (PDT) Received: (from grog@localhost) by wantadilla.lemis.com (8.11.0/8.9.3) id e82NMOT20851; Sun, 3 Sep 2000 08:52:24 +0930 (CST) (envelope-from grog) Date: Sun, 3 Sep 2000 08:52:24 +0930 From: Greg Lehey To: FreeBSD Questions Cc: groggy@iname.com Subject: Re: signature? Message-ID: <20000903085224.I17337@wantadilla.lemis.com> References: <200009022014.UAA02138@groggy.anc.ptialaska.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: <200009022014.UAA02138@groggy.anc.ptialaska.net>; from groggy@iname.com on Sat, Sep 02, 2000 at 08:14:03PM +0000 Organization: LEMIS, PO Box 460, Echunga SA 5153, Australia Phone: +61-8-8388-8286 Fax: +61-8-8388-8725 Mobile: +61-418-838-708 WWW-Home-Page: http://www.lemis.com/~grog X-PGP-Fingerprint: 6B 7B C3 8C 61 CD 54 AF 13 24 52 F8 6D A4 95 EF Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG [moved to -questions; this isn't an ISP issue] On Saturday, 2 September 2000 at 20:14:03 +0000, groggy@iname.com wrote: > can anyone tell me what the heck my ISP is doing to my machine? It's the name of your system: > Received: (from abc@localhost) > by groggy.anc.ptialaska.net (8.9.3/8.9.3) id UAA02138 > for isp@freebsd.org; Sat, 2 Sep 2000 20:14:03 GMT > (envelope-from groggy@iname.com) > is it a recognizable signature? they repeat this every > 1-2 minutes - and it does clog my connection a little! > is it stuff i should allow - or is something strange > going on? udp 68 is the "bootstrap protocol client". > i don't know what the heck that has to do with me, The messages seem to be coming from your end. I don't even see any replies. The two messages at 05:13:25.548800 have nothing to do with you, but suggest that you're on a broadcast medium. Considering that the names suggest this is ADSL, you might ask your ISP about that. > this is the full sequence ... > > 05:13:24.048994 209-193-28-245.adsl.jnu.acsalaska.net.netbios-ns > 208.151.115.193.netbios-ns: udp 68 > 05:13:24.049044 209-193-28-245.adsl.jnu.acsalaska.net.netbios-ns > 208.151.115.193.netbios-ns: udp 68 > 05:13:24.168796 groggy.netbios-ns > 208.151.115.193.netbios-ns: udp 68 > 05:13:24.168828 groggy.netbios-ns > 208.151.115.193.netbios-ns: udp 68 > 05:13:24.308786 groggy.51488 > 208.151.115.193.netbios-ns: udp 68 > 05:13:24.308822 groggy.51488 > 208.151.115.193.netbios-ns: udp 68 > 05:13:24.428758 groggy.46346 > 208.151.115.193.netbios-ns: udp 68 > > 05:13:25.528810 groggy.32996 > 208.151.115.193.netbios-ns: udp 68 > 05:13:25.528842 groggy.32996 > 208.151.115.193.netbios-ns: udp 68 > 05:13:25.548800 209-193-28-245.adsl.jnu.acsalaska.net.netbios-ns > 208.151.115.193.netbios-ns: udp 68 > 05:13:25.548831 209-193-28-245.adsl.jnu.acsalaska.net.netbios-ns > 208.151.115.193.netbios-ns: udp 68 > 05:13:25.668925 groggy.45057 > 208.151.115.193.netbios-ns: udp 68 > 05:13:25.668957 groggy.45057 > 208.151.115.193.netbios-ns: udp 68 > 05:13:25.699102 groggy.netbios-ns > 208.151.115.193.netbios-ns: udp 68 > 05:13:25.699133 groggy.netbios-ns > 208.151.115.193.netbios-ns: udp 68 > 05:13:25.808811 groggy.46773 > 208.151.115.193.netbios-ns: udp 68 > > i don't use dhcp or anything like that ... Are you sure you're not running some other daemon which uses this service? Take a look with 'ps lax' and see what you get. Greg -- Finger grog@lemis.com for PGP public key See complete headers for address and phone numbers To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message