Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 3 Sep 2000 08:52:24 +0930
From:      Greg Lehey <grog@lemis.com>
To:        FreeBSD Questions <questions@FreeBSD.org>
Cc:        groggy@iname.com
Subject:   Re: signature?
Message-ID:  <20000903085224.I17337@wantadilla.lemis.com>
In-Reply-To: <200009022014.UAA02138@groggy.anc.ptialaska.net>; from groggy@iname.com on Sat, Sep 02, 2000 at 08:14:03PM %2B0000
References:  <200009022014.UAA02138@groggy.anc.ptialaska.net>

next in thread | previous in thread | raw e-mail | index | archive | help
[moved to -questions; this isn't an ISP issue]

On Saturday,  2 September 2000 at 20:14:03 +0000, groggy@iname.com wrote:
> can anyone tell me what the heck my ISP is doing to my machine?

It's the name of your system:

> Received: (from abc@localhost)
>        by groggy.anc.ptialaska.net (8.9.3/8.9.3) id UAA02138
>        for isp@freebsd.org; Sat, 2 Sep 2000 20:14:03 GMT
>        (envelope-from groggy@iname.com)

> is it a recognizable signature?  they repeat this every
> 1-2 minutes - and it does clog my connection a little!
> is it stuff i should allow - or is something strange
> going on?  udp 68 is the "bootstrap protocol client".
> i don't know what the heck that has to do with me,

The messages seem to be coming from your end.  I don't even see any
replies.  The two messages at 05:13:25.548800 have nothing to do with
you, but suggest that you're on a broadcast medium.  Considering that
the names suggest this is ADSL, you might ask your ISP about that.

> this is the full sequence ...
>
> 05:13:24.048994 209-193-28-245.adsl.jnu.acsalaska.net.netbios-ns > 208.151.115.193.netbios-ns: udp 68
> 05:13:24.049044 209-193-28-245.adsl.jnu.acsalaska.net.netbios-ns > 208.151.115.193.netbios-ns: udp 68
> 05:13:24.168796 groggy.netbios-ns > 208.151.115.193.netbios-ns: udp 68
> 05:13:24.168828 groggy.netbios-ns > 208.151.115.193.netbios-ns: udp 68
> 05:13:24.308786 groggy.51488 > 208.151.115.193.netbios-ns: udp 68
> 05:13:24.308822 groggy.51488 > 208.151.115.193.netbios-ns: udp 68
> 05:13:24.428758 groggy.46346 > 208.151.115.193.netbios-ns: udp 68
> <snip>
> 05:13:25.528810 groggy.32996 > 208.151.115.193.netbios-ns: udp 68
> 05:13:25.528842 groggy.32996 > 208.151.115.193.netbios-ns: udp 68
> 05:13:25.548800 209-193-28-245.adsl.jnu.acsalaska.net.netbios-ns > 208.151.115.193.netbios-ns: udp 68
> 05:13:25.548831 209-193-28-245.adsl.jnu.acsalaska.net.netbios-ns > 208.151.115.193.netbios-ns: udp 68
> 05:13:25.668925 groggy.45057 > 208.151.115.193.netbios-ns: udp 68
> 05:13:25.668957 groggy.45057 > 208.151.115.193.netbios-ns: udp 68
> 05:13:25.699102 groggy.netbios-ns > 208.151.115.193.netbios-ns: udp 68
> 05:13:25.699133 groggy.netbios-ns > 208.151.115.193.netbios-ns: udp 68
> 05:13:25.808811 groggy.46773 > 208.151.115.193.netbios-ns: udp 68
> <snip>

> i don't use dhcp or anything like that ...

Are you sure you're not running some other daemon which uses this
service?  Take a look with 'ps lax' and see what you get.

Greg
--
Finger grog@lemis.com for PGP public key
See complete headers for address and phone numbers


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000903085224.I17337>