From owner-freebsd-questions@FreeBSD.ORG Fri Apr 18 05:42:29 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9818237B401 for ; Fri, 18 Apr 2003 05:42:29 -0700 (PDT) Received: from pa-plum1b-166.pit.adelphia.net (pa-plum1b-122.pit.adelphia.net [24.53.161.122]) by mx1.FreeBSD.org (Postfix) with ESMTP id A0E5343FBF for ; Fri, 18 Apr 2003 05:42:28 -0700 (PDT) (envelope-from wmoran@potentialtech.com) Received: from potentialtech.com (working [172.16.0.95]) h3ICgRJP019275; Fri, 18 Apr 2003 08:42:27 -0400 (EDT) (envelope-from wmoran@potentialtech.com) Message-ID: <3E9FF2B3.1000102@potentialtech.com> Date: Fri, 18 Apr 2003 08:42:27 -0400 From: Bill Moran User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.2.1) Gecko/20030301 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Dragoncrest References: <5.2.0.9.2.20030417222428.00a05760@pop.voyager.net> In-Reply-To: <5.2.0.9.2.20030417222428.00a05760@pop.voyager.net> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: freebsd-questions@FreeBSD.ORG Subject: Re: Strange network traffic?? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Apr 2003 12:42:30 -0000 Dragoncrest wrote: > Hi all. Just a few weeks back I started noticing this traffic > showing up on my lan and I have no idea how to explain it. Using > trafshow I get the from address as my router gateway for our connection > coming in from our provider, and destination as OSPF-ALL.MCAST.NET, the > protocol is OSPF, and it's only sending about 80 bytes of data every 30 > seconds to a minute or so. It's obviously not internal network traffic > as source and destination are not internal, yet these show up on my > machine when I'm monitoring the network. Any suggestions, ideas, or > thoughts as to what the heck this is?? OSPF is "open shortest path first", which is a routing protocol. From the looks of it, it's transmitting through multicast, so it's possible that your gateway is programmed to use ospf and is multicasting to your network to find other ospf capable devices. Check the docs on the router you're using. It's likely you can turn this off. -- Bill Moran Potential Technologies http://www.potentialtech.com