From owner-freebsd-questions  Fri Nov 23 19: 7:59 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from server.dambiec.com (CPE-61-9-148-152.vic.bigpond.net.au [61.9.148.152])
	by hub.freebsd.org (Postfix) with SMTP id 0FFA037B405
	for <freebsd-questions@FreeBSD.ORG>; Fri, 23 Nov 2001 19:07:53 -0800 (PST)
Received: (qmail 693 invoked from network); 24 Nov 2001 03:11:03 -0000
Received: from karun.lan (HELO karunwin2k) (10.0.1.3)
  by server.dambiec.com with SMTP; 24 Nov 2001 03:11:03 -0000
Message-ID: <000a01c17441$708a69a0$0301000a@karunwin2k>
From: "Karun" <karun@dambiec.com>
To: "Evren Yurtesen" <eyurtese@turkuamk.fi>,
	"Kris Kennaway" <kris@obsecurity.org>
Cc: <freebsd-questions@FreeBSD.ORG>
References: <Pine.A41.4.10.10111240326090.12862-100000@bessel.tekniikka.turkuamk.fi>
Subject: Re: Re:(2) ntop weirdness!
Date: Sat, 24 Nov 2001 03:08:15 +1000
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

Most likely the data being sent to that MAC address is to your
gateway/router on your network.

----- Original Message -----
From: "Evren Yurtesen" <eyurtese@turkuamk.fi>
To: "Kris Kennaway" <kris@obsecurity.org>
Cc: <freebsd-questions@FreeBSD.ORG>
Sent: Saturday, November 24, 2001 11:27 AM
Subject: Re:(2) ntop weirdness!


> I get lots of messages with 5555
> how do I interpret this now?
>
> 03:30:13.533299 0:50:55:55:55:55 0:90:6f:37:70:0 5555 86:
>                          5555 5555 5555 5555 5555 5555 5555 5555
>                          5555 5555 5555 5555 5555 5555 5555 5555
>                          5555 5555 5555 5555 5555 5555 5555 5555
>                          5555 5555 5555 5555 5555 5555 5555 5555
>                          5555 5555 5555 5555
>
> On Fri, 23 Nov 2001, Kris Kennaway wrote:
>
> > On Fri, Nov 23, 2001 at 11:26:06AM +0200, Evren Yurtesen wrote:
> > > when I run ntop, I see that I send many mb of data to some MAC
addresses
> > > in the network but I dont know what data it is and why the hell I send
> > > that data, how can I know from which process data is leaving and what
kind
> > > of data it is etc?
> >
> > Use tcpdump
> >
> > Kris
> >
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message