From: gabriel smolar <jarod125@ipipi.com>
To: netfilter@lists.netfilter.org
Subject: unexplained conntrack entries
Date: Sat, 26 Jul 2003 12:14:58 -0700 (PDT) [thread overview]
Message-ID: <24027487.1059246902125.JavaMail.operator_neoplanta1@neoplanta1> (raw)
when i do cat /proc/net/ip_conntrack i get o lot of entries like:
---------
tcp 6 359867 ESTABLISHED src=192.168.1.1 dst=192.168.1.184 sport=59975 dport=80 [UNREPLIED]
src=192.168.1.184 dst=192.168.1.1 sport=80 dport=59975 use=1
tcp 6 359867 ESTABLISHED src=192.168.1.1 dst=192.168.1.185 sport=59974 dport=80 [UNREPLIED]
src=192.168.1.185 dst=192.168.1.1 sport=80 dport=59974 use=1
tcp 6 359867 ESTABLISHED src=192.168.1.1 dst=192.168.1.185 sport=59975 dport=80 [UNREPLIED]
src=192.168.1.185 dst=192.168.1.1 sport=80 dport=59975 use=1
tcp 6 359867 ESTABLISHED src=192.168.1.1 dst=192.168.1.186 sport=59974 dport=80 [UNREPLIED]
src=192.168.1.186 dst=192.168.1.1 sport=80 dport=59974 use=1
tcp 6 359867 ESTABLISHED src=192.168.1.1 dst=192.168.1.186 sport=59975 dport=80 [UNREPLIED]
src=192.168.1.186 dst=192.168.1.1 sport=80 dport=59975 use=1
tcp 6 359867 ESTABLISHED src=192.168.1.1 dst=192.168.1.187 sport=59974 dport=80 [UNREPLIED]
src=192.168.1.187 dst=192.168.1.1 sport=80 dport=59974 use=1
tcp 6 359867 ESTABLISHED src=192.168.1.1 dst=192.168.1.187 sport=59975 dport=80 [UNREPLIED]
src=192.168.1.187 dst=192.168.1.1 sport=80 dport=59975 use=1
tcp 6 359867 ESTABLISHED src=192.168.1.1 dst=192.168.1.188 sport=59974 dport=80 [UNREPLIED]
src=192.168.1.188 dst=192.168.1.1 sport=80 dport=59974 use=1
---------
The sport is in the 56000 range and the dst is in the 192.168.1.* range. 192.168.1.1 is a slack 8.1 router with only sshd running, the rest of the lan are win boxes.
i can't figure it out what's generating these requests...
They don't show up when i monitor the traffic with iptraf.
reply other threads:[~2003-07-26 19:14 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=24027487.1059246902125.JavaMail.operator_neoplanta1@neoplanta1 \
--to=jarod125@ipipi.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.